Lucene search
+L

500686 matches found

ATTACKERKB
ATTACKERKB
added 2026/08/05 11:27 a.m.7 views

CVE-2026-18933

The wp-downloadmanager WordPress plugin, in version 1.68.11 also affecting the 6.9.4 release line, allows an admin-privileged user currentusercan'managedownloads' to upload arbitrary files via download-add.php with no extension or MIME-type validation of any kind - no wpcheckfiletypeandext, no...

7.2CVSS6.1AI score0.00278EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/05 11:27 a.m.10 views

EUVD-2026-53330

The wp-downloadmanager WordPress plugin, in version 1.68.11 also affecting the 6.9.4 release line, allows an admin-privileged user currentusercan'managedownloads' to upload arbitrary files via download-add.php with no extension or MIME-type validation of any kind - no wpcheckfiletypeandext, no...

7.2CVSS6.1AI score0.00278EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/05 11:27 a.m.47 views

CVE-2026-18933 wp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversal

The wp-downloadmanager WordPress plugin, in version 1.68.11 also affecting the 6.9.4 release line, allows an admin-privileged user currentusercan'managedownloads' to upload arbitrary files via download-add.php with no extension or MIME-type validation of any kind - no wpcheckfiletypeandext, no...

7.2CVSS0.00278EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/05 11:27 a.m.9 views

CVE-2026-18933 wp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversal

The wp-downloadmanager WordPress plugin, in version 1.68.11 also affecting the 6.9.4 release line, allows an admin-privileged user currentusercan'managedownloads' to upload arbitrary files via download-add.php with no extension or MIME-type validation of any kind - no wpcheckfiletypeandext, no...

7.2CVSS5.4AI score0.00278EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 11:27 a.m.44 views

CVE-2026-18933

The wp-downloadmanager plugin (v1.68.11, also affecting the 6.9.4 line) allows an admin user to upload arbitrary files via download-add.php without any extension/MIME validation or traversal protection. The destination path is built from unsanitized $_POST['file_upload_to'], and since the base pa...

7.2CVSS5.4AI score0.00278EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/05 11:16 a.m.5 views

CVE-2026-71232

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...

7.2CVSS0.003EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/05 11:16 a.m.5 views

CVE-2026-66747

Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line. It is the open-source ycsunjane/rctl tool built in as an OpenWrt package librctl.so, started at boot and run as root under the process name kworker to blend in...

9.8CVSS0.00579EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/05 11:16 a.m.5 views

CVE-2026-60009

In Eclipse Theia versions up to and including 1.73.1, the @theia/filesystem backend binds POST /file-upload in every filesystem-enabled deployment. The handler takes an attacker-supplied absolute path from the multipart uri field and calls fs.movetmp, target, overwrite: true with no workspace...

8.8CVSS0.00323EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/08/05 10:59 a.m.7 views

CVE-2026-60009

In Eclipse Theia versions up to and including 1.73.1, the @theia/filesystem backend binds POST /file-upload in every filesystem-enabled deployment. The handler takes an attacker-supplied absolute path from the multipart uri field and calls fs.movetmp, target, overwrite: true with no workspace...

8.8CVSS6AI score0.00323EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/08/05 10:59 a.m.8 views

EUVD-2026-53326

In Eclipse Theia versions up to and including 1.73.1, the @theia/filesystem backend binds POST /file-upload in every filesystem-enabled deployment. The handler takes an attacker-supplied absolute path from the multipart uri field and calls fs.movetmp, target, overwrite: true with no workspace...

8.8CVSS6AI score0.00323EPSS
SaveExploits1References3
CVE
CVE
added 2026/08/05 10:59 a.m.52 views

CVE-2026-60009

In Eclipse Theia up to 1.73.1, the backend @theia/filesystem binds POST /file-upload in every filesystem-enabled deployment. The handler uses an attacker-supplied absolute path from the multipart uri field and calls fs.move(tmp, target, { overwrite: true }) with no workspace confinement and no au...

8.8CVSS6AI score0.00323EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2026/08/05 10:59 a.m.5 views

CVE-2026-60009

In Eclipse Theia versions up to and including 1.73.1, the @theia/filesystem backend binds POST /file-upload in every filesystem-enabled deployment. The handler takes an attacker-supplied absolute path from the multipart uri field and calls fs.movetmp, target, overwrite: true with no workspace...

8.8CVSS5.8AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/08/05 10:56 a.m.9 views

CVE-2026-71232

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog. Combined...

7.2CVSS6AI score0.003EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/05 10:56 a.m.7 views

EUVD-2026-53305

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog. Combined...

7.2CVSS6AI score0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/05 10:56 a.m.37 views

CVE-2026-71232 MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...

7.2CVSS0.003EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/05 10:56 a.m.6 views

CVE-2026-71232 MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...

7.2CVSS5.3AI score0.003EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/05 10:56 a.m.9 views

CVE-2026-71232 MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...

7.2CVSS5.4AI score
SaveExploits0References3
CVE
CVE
added 2026/08/05 10:56 a.m.47 views

CVE-2026-71232

CVE-2026-71232 concerns MacCMS10: specifically, the admin template editor (application/admin/controller/Template.php) had a blacklist-based filter that failed to block several PHP functions (exec, passthru, popen, show_source, create_function, register_shutdown_function, register_tick_function, e...

7.2CVSS5.3AI score0.003EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/05 10:50 a.m.16 views

CVE-2026-66747

Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line. It is the open-source ycsunjane/rctl tool built in as an OpenWrt package librctl.so, started at boot and run as root under the process name kworker to blend in...

9.8CVSS6.4AI score0.00579EPSS
SaveExploits0References5Affected Software20
CVE
CVE
added 2026/08/05 10:50 a.m.97 views

CVE-2026-66747

The CVE describes a firmware implant in Zbtlink router firmware (ENDLESSDOORS) embedded as an OpenWrt package (librctl.so) that runs at boot as root under kworker. It does not listen for connections but phones home over cleartext TCP to a hardcoded C2 address on channels 7000/7001, with no authen...

9.8CVSS6.4AI score0.00579EPSS
SaveExploits0References4
Rows per page
Query Builder