407970 matches found
CVE-2026-77693
The Order Tip for WooCommerce WordPress plugin before 1.6.0 does not check the capability of the user requesting a file deletion, nor does it restrict which path may be deleted, allowing users with the Shop Manager role and above to delete arbitrary files on the server, which could lead to the si...
CVE-2026-77757
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...
CVE-2026-75797
The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...
CVE-2025-0411-PoC
अधिक PoC देखें: https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X MinGW-w64 का उपयोग करके cpp संकलन करें x8664-w64-mingw32-g++ loader.cpp -o loader.exe -s -static संकलन के बाद exe को 7z से संपीड़ित करें और दो बार निष्पादित करें चूँकि इस भेद्यता के लिए उपयोगकर्ता की सहभागिता आवश्यक है, इसलिए...
cve-2025-66723
CVE-2025-66723: inMusic Brands Engine DJ =3.0.0 से 4.3.4 तक स्थानीय और नेटवर्क फ़ाइलों को बाहरी पक्षों को उजागर करता है सारांश inMusic Brands सॉफ्टवेयर Engine DJ में एक एम्बेडेड HTTP सर्वर है जो मीडिया लाइब्रेरी फ़ाइलों को नेटवर्क पर कनेक्टेड क्लाइंट तक पहुँचाने के लिए होता है। मीडिया फ़ाइलों को...
CVE-2026-18431 Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write
The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...
EUVD-2026-66293
The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...
CVE-2026-18431
The Avada WordPress theme (≤ 7.16) combined with the Fusion Builder plugin (≤ 3.16) is vulnerable to unauthenticated Remote Code Execution via a chain of six authorization and input validation weaknesses enabling arbitrary file write. An attacker can create and execute arbitrary PHP files, leadin...
EUVD-2026-66287
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...
CVE-2026-77757
CVE-2026-77757 affects the Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin (versions 8.5 through 8.9.2 ). The plugin fails to sanitize a user-supplied image reference before using it as the source of a file move via the REST v2 Listing Submission endpoint. A...
CVE-2026-77757 Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...
CVE-2026-77757 Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...
EUVD-2026-66283
The Order Tip for WooCommerce WordPress plugin before 1.6.0 does not check the capability of the user requesting a file deletion, nor does it restrict which path may be deleted, allowing users with the Shop Manager role and above to delete arbitrary files on the server, which could lead to the si...
CVE-2026-77693
The Order Tip for WooCommerce WordPress plugin (versions before 1.6.0 ) contains an arbitrary file deletion vulnerability in the delete_exported_csv_file_ajax function. The plugin fails to verify the requesting user's capability or restrict the file path, allowing authenticated users with the Sho...
CVE-2026-77693 Order Tip for WooCommerce < 1.6.0 - Shop Manager+ Arbitrary File Deletion via delete_exported_csv_file_ajax
The Order Tip for WooCommerce WordPress plugin before 1.6.0 does not check the capability of the user requesting a file deletion, nor does it restrict which path may be deleted, allowing users with the Shop Manager role and above to delete arbitrary files on the server, which could lead to the si...
CVE-2026-75797
CVE-2026-75797 is an arbitrary file read vulnerability in the AI Engine WordPress plugin (versions 3.3.3–3.7.1 ). The plugin fails to confine a caller-supplied url parameter when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, enab...
EUVD-2026-66281
The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...
CVE-2026-75797 AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter
The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...
CVE-2025-25599
CVE-2025-25599 विवरण Bolt एक ओपन-सोर्स सामग्री प्रबंधन प्रणाली है जो Symfony PHP फ्रेमवर्क का उपयोग करके बनाई गई है। एक छोटे सुरक्षा मूल्यांकन के दौरान, Certitude ने कई कमजोरियों की पहचान की, जिसमें मनमाना फ़ाइल पढ़ना शामिल है। जिन उपयोगकर्ताओं के पास EDITOR , CHIEFEDITOR , ADMIN , या DEVELOPER...
fim-ebpf
FIM-eBPF: eBPF के साथ फ़ाइल अखंडता निगरानी Linux पर फ़ाइल निर्माण और संशोधन घटनाओं की निगरानी के लिए एक हल्का eBPF प्रोग्राम। यह उपकरण कर्नेल से सीधे फ़ाइल संचालन का पता लगाने के लिए eBPF एक्सटेंडेड बर्कले पैकेट फ़िल्टर का उपयोग करता है, जो न्यूनतम ओवरहेड के साथ उच्च प्रदर्शन निगरानी प्रदान करता...