CVE-2024-7627 Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated...

CVE-2024-7627: Improper Control of Generation of Code

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated...

WordPress Plugin Bit File Manager: Code Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

WordPress Bit File Manager plugin 6.0-6.5.5 - Unauthenticated Remote Code Execution via Race Condition vulnerability

Unauthenticated Remote Code Execution via Race Condition vulnerability discovered by TANG Cheuk Hei siunam in WordPress Plugin Bit File Manager versions 6.0-6.5.5...

20,000 WordPress Sites Affected by Remote Code Execution Vulnerability in Bit File Manager WordPress Plugin

📢 Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Through October 14th, researchers can earn up to $31,200, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, an...

PT-2024-38462 · WordPress · Bit File Manager

Name of the Vulnerable Software and Affected Versions: Bit File Manager plugin for WordPress versions 6.0 through 6.5.5 Description: The issue is related to Remote Code Execution. This occurs due to the plugin writing a temporary file to a publicly accessible directory before performing file...

WordPress Bit File Manager Plugin 6.0-6.5.5 is vulnerable to Arbitrary File Upload

Software Bit File Manager Type Plugin Vulnerable versions 6.0-6.5.5 Fixed in 6.5.6 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-7627 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 8d646fb4b08e Credits TANG Cheuk Hei siunam Required...

CVE-2023-26321

A path traversal vulnerability exists in the Xiaomi File Manager application productinternational version. The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file...

CVE-2023-26321

A path traversal vulnerability exists in the Xiaomi File Manager application productinternational version. The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file...

CVE-2023-26321 The international version of Xiaomi File Manager has a path traversal vulnerability

A path traversal vulnerability exists in the Xiaomi File Manager application productinternational version. The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file...

CVE-2023-26321

CVE-2023-26321 affects the international version of Xiaomi File Manager and is a path traversal vulnerability caused by unfiltered special characters, enabling overwriting and code execution in the file. Public data assigns a high/critical impact profile (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:...

CVE-2023-26321 The international version of Xiaomi File Manager has a path traversal vulnerability

A path traversal vulnerability exists in the Xiaomi File Manager application productinternational version. The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file...

Xiaomi File Manager security vulnerability

Xiaomi File Manager is a free and secure tool from the Chinese company Xiaomi Xiaomi. It helps find files faster, manage them easily and share them with others offline. A security vulnerability exists in Xiaomi File Manager that stems from unfiltered special characters that result in path...

CVE-2023-26321: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in the Xiaomi File Manager application productinternational version. The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file...

CVE-2024-8164

A vulnerability was determined in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This affects the function rename of the file /Admin/Http/Controllers/FileManagerController.php. This manipulation of the argument newname causes unrestricted upload. The attack can be initiated remotely...

CVE-2024-8165 Chengdu Everbrite Network Technology BeikeShop export exportZip path traversal

A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This vulnerability affects the function exportZip of the file /admin/filemanager/export. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit i...

CVE-2024-8163

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/filemanager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The...

PT-2024-38849

Name of the Vulnerable Software and Affected Versions: Chengdu Everbrite Network Technology BeikeShop versions up to 1.5.5 Description: A critical issue has been found, affecting the rename function of the file /Admin/Http/Controllers/FileManagerController.php. The manipulation of the new name...

Everbrite BeikeShop path traversal vulnerability

Everbrite BeikeShop is an e-commerce system from China Everbright Everbrite. A path traversal vulnerability exists in Everbrite BeikeShop 1.5.5 and earlier versions, which originates in the destroyFiles function of the file /admin/filemanager/files, where manipulation of the parameter files can...

Everbrite BeikeShop code-related vulnerabilities

Network etc. are Cloudburst open source products. network is a network component. backpack for Laravel FileManager etc. are Backpack for Laravel open source products. fileManager is a file manager. clickHouse ch etc. are ClickHouse open source products. ch is a ClickHouse low-level Go client...