Lucene search
+L

49161 matches found

Cvelist
Cvelist
added 2026/08/26 8:26 a.m.32 views

CVE-2026-80235 Thinking Software Technology|EFence - Arbitrary File Upload

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS0.00677EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/26 8:26 a.m.26 views

CVE-2026-80235

EFence by Thinking Software Technology is affected by an Arbitrary File Upload vulnerability that allows unauthenticated remote attackers to upload and execute web shell backdoors, leading to arbitrary code execution on the server. The vulnerability is rated CRITICAL with a CVSS 3.1 base score of...

9.8CVSS6.3AI score0.00677EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/26 8:26 a.m.6 views

EUVD-2026-66344

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS6.3AI score0.00677EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/26 8:19 a.m.14 views

CVE-2026-80233

CAYIN Technology's CMS-WS, CMS-SE, and SMP series products are affected by an arbitrary file upload vulnerability. A privileged remote attacker can upload and execute web shells, enabling arbitrary code execution on the server. Per the CVSS 3.1 score of 7.2 (HIGH) from TWCERT, the attack requires...

8.6CVSS6.3AI score0.0062EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/26 8:19 a.m.6 views

EUVD-2026-66342

CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server...

8.6CVSS6.3AI score0.0062EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/26 8:19 a.m.31 views

CVE-2026-80233 CAYIN Technology|CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload

CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server...

8.6CVSS0.0062EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/08/26 7:45 a.m.9 views

WordPress Avada Theme <= 7.16 - Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability

Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability discovered by WordFence in WordPress Theme Avada versions = 7.16...

9.8CVSS5.5AI score0.00638EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/08/26 7:44 a.m.8 views

WordPress Fusion Builder plugin <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability

Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability discovered by WordFence in WordPress Plugin Fusion Builder versions = 3.16...

9.8CVSS5.5AI score0.00638EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

CVE-2024-20767-Adobe-ColdFusion

CVE-2024-20767-Adobe-ColdFusion Adobe ColdFusion è una piattaforma di sviluppo rapido per creare e distribuire applicazioni web e mobili. CVE-2024-20767 - Le versioni di ColdFusion 2023.6, 2021.12 e precedenti sono affette da una vulnerabilità di Controllo Accesso Inadeguato che potrebbe portare...

7.4CVSS8AI score0.98514EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

Exch-CVE-2021-26855_Priv

Exch-CVE-2021-26855 ProxyLogon è il nome generico formale per CVE-2021-26855, una vulnerabilità su Microsoft Exchange Server che consente a un attaccante di bypassare l'autenticazione e impersonare l'amministratore. Abbiamo anche concatenato questo bug con un'altra vulnerabilità post-autenticazio...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits67
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

EventLogin-CVE-2025-29969

EventLogin - CVE-2025-29969 EventLogin ist eine Time-of-Check-Time-of-Use-Schwachstelle im MS-EVEN-Protokoll. Die Schwachstelle ermöglicht es niedrig privilegierten Benutzern, beliebige Dateien auf einem entfernten Rechner zu schreiben, wodurch die Notwendigkeit eines Administratorkontos für eine...

7.5CVSS8.1AI score0.01115EPSS
SaveExploits1
NVD
NVD
added 2026/08/26 7:16 a.m.7 views

CVE-2026-18431

The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...

9.8CVSS0.00638EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/26 6:16 a.m.6 views

CVE-2026-77757

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

5.4CVSS0.00254EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/26 6:16 a.m.5 views

CVE-2026-75797

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

7.7CVSS0.00381EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/26 6:08 a.m.96 views

CVE-2026-18431 Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write

The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...

9.8CVSS0.00638EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/26 6:08 a.m.143 views

CVE-2026-18431

The Avada WordPress theme (≤ 7.16) combined with the Fusion Builder plugin (≤ 3.16) is vulnerable to unauthenticated Remote Code Execution via a chain of six authorization and input validation weaknesses enabling arbitrary file write. An attacker can create and execute arbitrary PHP files, leadin...

9.8CVSS6.8AI score0.00638EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/26 6:08 a.m.18 views

EUVD-2026-66293

The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...

9.8CVSS6.7AI score0.00638EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/26 6:00 a.m.7 views

EUVD-2026-66287

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

5.4CVSS5.7AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/26 6:00 a.m.7 views

CVE-2026-77757

CVE-2026-77757 affects the Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin (versions 8.5 through 8.9.2 ). The plugin fails to sanitize a user-supplied image reference before using it as the source of a file move via the REST v2 Listing Submission endpoint. A...

5.4CVSS5.5AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/26 6:00 a.m.33 views

CVE-2026-77757 Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

0.00254EPSS
SaveExploits0References1
Rows per page
Query Builder