Curated security research, vulnerabilities, advisories and tools for practitioners.

#lfi

Security coverage tagged lfi.

1.

WordPress Core Unauthenticated Path Traversal to LFI & RCE PoC (CVE-2026-87902)

vulnerability | High | 2026-09-22 18:40 | CVE-2026-87902 | github.com | Original ↗ | .md | #bug-bounty | #rce | #wordpress

2.

Local AI for Penetration Testing & Research

research | 2026-06-28 04:34 | CVE-2026-12194 | projectblack.io | Original ↗ | .md | #ai-security | #agentic-ai | #vulnerability-research

3.

Gibbon v30.0.00: Authenticated SQL Injection and RCE

research | 2026-05-06 23:12 | projectblack.io | Original ↗ | .md | #rce | #vulnerability-research | #sql-injection

4.

Traccar Unauthenticated LFI v5.8-v6.8.1

research | 2025-10-01 11:28 | CVE-2025-61666 | projectblack.io | Original ↗ | .md | #lfi | #unauthenticated | #traccar

5.

How XBOW Turned a JavaScript Hint Into a Working File Inclusion

blog | 2025-07-21 12:00 | xbow.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #path-traversal

6.

Advisory: Flarum LFI - CVE-2023-40033

research | 2023-08-28 00:00 | CVE-2023-40033 | slcyber.io | Original ↗ | .md | #vulnerability-research | #advisory | #lfi

7.

Zamzar API Advisory

vulnerability | 2020-08-27 00:00 | bishopfox.com | Original ↗ | .md | #api-security | #vulnerability | #advisory

8.

LibreHealth Version 2.0.0

vulnerability | 2020-07-14 00:00 | bishopfox.com | Original ↗ | .md | #sql-injection | #vulnerability | #advisory

9.

Directory Traversal, File Inclusion, and The Proc File System

blog | 2016-02-23 00:00 | netspi.com | Original ↗ | .md | #linux | #reconnaissance | #directory-traversal