CVE-2025-34085

📂 Simple File List – Exploit RCE non autenticato CVE-2025-34085 ⚠️ Codice exploit di: Mrj Haxcore Uno script Python completamente funzionante per il plugin WordPress Simple File List = 4.2.3, vulnerabile a esecuzione remota di codice RCE non autenticata a causa di una logica non sicura di...

CVE-2025-34085

Cyberlone Indonesia 🛠️ WordPress Simple File List RCE Scanner + Auto-Clean Strumento automatico per rilevare e sfruttare l'Remote Code Execution RCE non autenticata nel plugin WordPress Simple File List , in particolare quelli vulnerabili a CVE-2025-34085. Dotato di un sistema di pulizia automatic...

EUVD-2026-66343

CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure...

CVE-2026-80234 CAYIN Technology｜CAYIN CMS-WS/CMS-SE - Missing Authentication

CAYIN CMS-WS and CMS-SE , developed by CAYIN Technology, are affected by a Missing Authentication vulnerability. An unauthenticated remote attacker can leverage a specific functionality to obtain media file lists , resulting in partial information disclosure . The CNA TW CERT assigned a CVSS 3.1 ...

CVE-2025-34085

CVE-2025-34085 — Simple File List di WordPress RCE non autenticato Un exploit automatizzato per CVE-2025-34085 duplicato di CVE-2020-36847, una vulnerabilità critica di esecuzione di codice in remoto non autenticata nel plugin WordPress Simple File List versioni ≤ 4.2.2. Nota: CVE-2025-34085 è...

CVE-2022-1119

CVE-2022-1119 1. Einführung WordPress Simple File List 3.2.8 FileRead POC 2. Verwendung root@kitploit: poc -f host.txt // 批量扫描 poc -h 192.168.1.1 // 单个扫描 3. Haftungsausschluss Dieses Tool dient ausschließlich zu Lern-, Forschungs- und Selbstprüfungszwecken. Es sollte nicht für illegale Zwecke...

By-Poloss..-..CVE-2026-11912

CVE-2026-11912: Simple File List = 6.3.7 - Autorizzazione Mancante per Modifica File Non Autenticata Sintesi Esecutiva...

CVE-2025-34085-Multi-target

CVE-2025-34085 Scanner RCE Multi-Alvo Scanner de exploração em massa para CVE-2025-34085 — uma vulnerabilidade de execução remota de código não autenticada no plugin WordPress Simple File List. Esta ferramenta faz upload de um payload PHP disfarçado de imagem, renomeia-o através de um motor de...

Simple File List < 6.1.13 - Reflected Cross-Site Scripting

Simple File List WordPress plugin \u003C 6.1.13 contains a reflected cross-site scripting caused by unsanitized URL output in an attribute, letting attackers execute malicious scripts in admin browsers, exploit requires victim to be an admin. id: CVE-2024-10146 info: name: Simple File List 6.1.13...

WordPress Simple File List - Path Traversal

Simple File List plugin allows path traversal via file upload, enabling files to be written outside the upload directory. id: CVE-2020-12832 info: name: WordPress Simple File List - Path Traversal author: riteshs4hu severity: critical description: | Simple File List plugin allows path traversal v...

Simple File List < 4.4.12 - Cross Site Scripting

The plugin does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting id: CVE-2022-3062 info: name: Simple File List 4.4.12 - Cross Site Scripting author: r3Y3r53 severity: medium description: | The plugin does not escape parameters before...

CVE-2025-34085

CVE-2025-34085 — Exploit für nicht authentifizierte Remote-Codeausführung in WordPress Simple File List Ein automatisierter Exploit und Scanner für CVE-2025-34085 , eine kritische Schwachstelle im WordPress Simple File List Plugin, die nicht authentifizierte Remote-Codeausführung durch...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Stored XSS via File Description vulnerability

Unauthenticated Stored XSS via File Description vulnerability discovered by Ruwantha Harshamal in WordPress Plugin Simple File List versions = 6.3.11...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability

Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability discovered by Sanjar Tulkinov in WordPress Plugin Simple File List versions = 6.3.11...

simple-file-list-rce

simple-file-list-rce Simple File List 4.2.3 - बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड RCE root@kitploit: usage: simple.py -h -u URL -f1 FILE1 -f2 FILE2 -p PATH optional arguments: -h, --help show this help message and exit -u URL, --url URL Wordpress Url i.e https://wordpress.lan -f1 FILE1, --file1...

EUVD-2026-62936

In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the add listitem action in a Safe Mode playbook while that action is listed as read-only, which could allow for unauthorized changes to file lists. The vulnerability is...

CVE-2026-76371

In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the add listitem action in a Safe Mode playbook while that action is listed as read-only, which could allow for unauthorized changes to file lists. The vulnerability is...

CVE-2026-76371 Incorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAR

In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the add listitem action in a Safe Mode playbook while that action is listed as read-only, which could allow for unauthorized changes to file lists. The vulnerability is...

CVE-2026-16616

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

CVE-2026-16617

The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...