Lucene search
+L

265 matches found

Positive Technologies
Positive Technologies
•added 2025/06/18 12:00 a.m.•16 views

PT-2025-33813

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the fs/ntfs3 component where a live inode can be incorrectly marked as a bad inode during file renaming operations, specifically when a file nam...

7.8CVSS6.1AI score0.00169EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 9:04 a.m.•15 views

CVE-2024-5279

A vulnerability was found in Qiwen Netdisk up to 1.4.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component File Rename Handler. The manipulation with the input leads to cross site scripting. The attack can be launched remotely. The...

5.3CVSS5.8AI score0.00334EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:39 a.m.•16 views

CVE-2024-23634

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file renaming vulnerability exists in versions prior to 2.23.5 and 2.24.2 that enables an authenticated administrator with permissions to modify stores through the REST...

6CVSS6.9AI score0.00694EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:40 p.m.•15 views

CVE-2021-26596

An issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that...

5.4CVSS6.1AI score0.00737EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:14 p.m.•17 views

CVE-2018-10516

In CMS Made Simple CMSMS through 2.2.7, the "file rename" operation in the admin dashboard contains a sensitive information disclosure vulnerability, exploitable by an admin user, that can cause DoS by moving config.php to the upload/ directory...

6.5CVSS6.4AI score0.01173EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:03 a.m.•19 views

CVE-2019-17575

A file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This can be exploited by an authenticated user with admin privileges to rename a media filename and extension. For example: place PHP code in a .jpg file, and then change the file's base name to filename.p...

7.2CVSS7.6AI score0.01437EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:07 a.m.•15 views

CVE-2018-20893

cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...

2.3CVSS7AI score0.00347EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 6:24 a.m.•14 views

CVE-2017-16892

In Bftpd before 4.7, there is a memory leak in the file rename function...

7.5CVSS6.8AI score0.01165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/21 5:40 p.m.•19 views

CVE-2025-48064 GitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure

GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network...

3.3CVSS4AI score0.00172EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/11 2:15 p.m.•29 views

CVE-2025-2195

A vulnerability was found in MRCMS 3.1.2. It has been classified as problematic. Affected is the function rename of the file /admin/file/rename.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument name/path leads to cross site scripting. It is possib...

6.1CVSS0.00362EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/11 1:31 p.m.•97 views

CVE-2025-2195

CVE-2025-2195 affects MRCMS 3.1.2, where the vulnerable component is the rename function in /admin/file/rename.do (org.marker.mushroom.controller.FileController). The manipulation of the name/path argument enables cross-site scripting (XSS); the issue can be exploited remotely and exploitation ha...

6.1CVSS3.6AI score0.00362EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•20 views

PT-2025-10752 · Mrcms · Mrcms

Name of the Vulnerable Software and Affected Versions: MRCMS version 3.1.2 Description: A problem was found in the rename function of the /admin/file/rename.do file in the org.marker.mushroom.controller.FileController component. The manipulation of the name/path argument leads to cross-site...

6.1CVSS4AI score0.00362EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/06 12:00 a.m.•3 views

CVE-2025-2032: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as problematic was found in ChestnutCMS 1.5.2. This vulnerability affects the function renameFile of the file /cms/file/rename. The manipulation of the argument rename leads to path traversal. The exploit has been disclosed to the public and may be used...

5.1CVSS5.1AI score0.0051EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•20 views

PT-2025-30765

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between file renames and directory logging within the Btrfs filesystem. This can lead to file loss if a crash or power failure occurs during the rename process...

9.1CVSS6.5AI score0.00312EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/21 12:00 a.m.•4 views

CVE-2024-10482: Improper Neutralization of Input During Web Page Generation

The Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin before 1.5.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

5.4CVSS5.8AI score0.00373EPSS
SaveExploits1References1
NVD
NVD
•added 2024/08/26 2:15 p.m.•44 views

CVE-2024-8164

A vulnerability was determined in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This affects the function rename of the file /Admin/Http/Controllers/FileManagerController.php. This manipulation of the argument newname causes unrestricted upload. The attack can be initiated remotely...

8.8CVSS0.00548EPSS
SaveExploits1References4
CVE
CVE
•added 2024/08/26 1:31 p.m.•69 views

CVE-2024-8164

CVE-2024-8164 affects Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. The flaw resides in the rename function of /Admin/Http/Controllers/FileManagerController.php, where manipulating the argument new_name enables unrestricted upload. The issue can be triggered remotely and was publicl...

8.8CVSS6.4AI score0.00548EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/05/23 11:00 p.m.•35 views

CVE-2024-5279 Qiwen Netdisk File Rename cross site scripting

A vulnerability was found in Qiwen Netdisk up to 1.4.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component File Rename Handler. The manipulation with the input leads to cross site scripting. The attack can be launched remotely. The...

5.3CVSS3.8AI score0.00334EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/05/23 11:00 p.m.•14 views

CVE-2024-5279 Qiwen Netdisk File Rename cross site scripting

A vulnerability was found in Qiwen Netdisk up to 1.4.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component File Rename Handler. The manipulation with the input leads to cross site scripting. The attack can be launched remotely. The...

5.3CVSS6.2AI score0.00334EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/23 12:00 a.m.•3 views

CVE-2024-5279: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Qiwen Netdisk up to 1.4.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component File Rename Handler. The manipulation with the input leads to cross site scripting. The attack can be launched remotely. The...

5.3CVSS3.7AI score0.00334EPSS
SaveExploits0References1
Rows per page
Query Builder