local file inclusion

CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft

• Vulnerability Report

CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft

Ddos January 6, 2026 0

A critical vulnerability has been discovered in jsPDF, one of the most popular JavaScript libraries for generating...

Read More Read more about CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft

Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers

• Vulnerability Report

Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers

Ddos December 25, 2025 0

Administrators of the popular Zimbra Collaboration Suite (ZCS) are being urged to patch immediately after the discovery...

Read More Read more about Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers

CISA KEV Alert: Two Critical Flaws Under Active Exploitation, Including Gladinet LFI/RCE and CWP Admin Takeover

• Vulnerability Report

CISA KEV Alert: Two Critical Flaws Under Active Exploitation, Including Gladinet LFI/RCE and CWP Admin Takeover

Ddos November 5, 2025 0

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities—CVE-2025-11371 in Gladinet CentreStack and...

Read More Read more about CISA KEV Alert: Two Critical Flaws Under Active Exploitation, Including Gladinet LFI/RCE and CWP Admin Takeover

Critical WooCommerce Plugin Flaw (CVE-2025-12493, CVSS 9.8) Allows Unauthenticated RCE, 100,000+ Sites Affect

• Vulnerability Report

Critical WooCommerce Plugin Flaw (CVE-2025-12493, CVSS 9.8) Allows Unauthenticated RCE, 100,000+ Sites Affect

Ddos November 5, 2025 0

A critical-severity Local File Inclusion (LFI) flaw in the popular WordPress plugin ShopLentor – WooCommerce Builder for...

Read More Read more about Critical WooCommerce Plugin Flaw (CVE-2025-12493, CVSS 9.8) Allows Unauthenticated RCE, 100,000+ Sites Affect

Exploited Zero-Day: Gladinet/Triofox Flaw CVE-2025-11371 Allows RCE via LFI

• Vulnerability Report

Exploited Zero-Day: Gladinet/Triofox Flaw CVE-2025-11371 Allows RCE via LFI

Ddos October 10, 2025 0

Huntress has sounded the alarm over active exploitation of a newly discovered Local File Inclusion (LFI) vulnerability...

Read More Read more about Exploited Zero-Day: Gladinet/Triofox Flaw CVE-2025-11371 Allows RCE via LFI

CVE-2025-46619: LFI Vulnerability Affects Multiple Versions of Couchbase Server for Windows

• Vulnerability

CVE-2025-46619: LFI Vulnerability Affects Multiple Versions of Couchbase Server for Windows

Ddos May 2, 2025 0

Couchbase Server, a widely-used NoSQL document database engineered for high-performance, interactive applications, disclosed a serious security flaw....

Read More Read more about CVE-2025-46619: LFI Vulnerability Affects Multiple Versions of Couchbase Server for Windows

InstaWP Connect Plugin Exposes WordPress Sites to Critical File Inclusion Vulnerability

• Vulnerability

InstaWP Connect Plugin Exposes WordPress Sites to Critical File Inclusion Vulnerability

Ddos April 11, 2025 0

A severe security vulnerability has been identified in the InstaWP Connect WordPress plugin, posing a significant risk...

Read More Read more about InstaWP Connect Plugin Exposes WordPress Sites to Critical File Inclusion Vulnerability

CVE-2024-33533 to 33536: Zimbra Users at Risk of XSS and LFI Attacks

• Vulnerability

CVE-2024-33533 to 33536: Zimbra Users at Risk of XSS and LFI Attacks

Ddos August 15, 2024 0

Zimbra Collaboration, a widely adopted email and collaboration platform disclosed three new security vulnerabilities. These flaws, identified...

Read More Read more about CVE-2024-33533 to 33536: Zimbra Users at Risk of XSS and LFI Attacks