2166 matches found
CVE-2026-91072 EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler
The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own uploads directory, letting an attacker with Administrator-level access rename or delete existing WebP-derivative image files outside that scope, including, on...
CVE-2026-91072
The EWWW Image Optimizer WordPress plugin (versions before 8.8.0 ) contains a vulnerability where a WebP-derivative file migration routine is not properly confined to the site's specific uploads directory. This flaw allows an attacker with Administrator-level access to rename or delete WebP-deriv...
CVE-2026-91072 EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler
The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own uploads directory, letting an attacker with Administrator-level access rename or delete existing WebP-derivative image files outside that scope, including, on...
CVE-2025-34085
CVE-2025-34085 — WordPress Simple File List Unauthenticated RCE Exploit An automated exploit and scanner for CVE-2025-34085 , a critical vulnerability in the WordPress Simple File List plugin, enabling unauthenticated remote code execution through arbitrary file upload and rename functionalities....
laravel-filemanager-unrestricted-upload
Laravel FileManager 無制限ファイルアップロード CVE-2025-56399 CWE-434: 危険なタイプのファイルの無制限アップロード CVSS スコア: 8.5 高 📋 説明 このツールは、alexusmai/laravel-file-manager バージョン 3.3.1 以下 の重大な脆弱性 CVE-2025-56399 の Proof of Concept PoC を提供します。 この脆弱性により、認証された攻撃者 が細工されたファイルをアップロードし、クライアント側の検証を回避し、PHP 拡張子にリネームすることで リモートコード実行 RCE...
CVE-2025-56399
CVE-2025-56399 – Authenticated Remote Code Execution in laravel-file-manager v3.3.1 🧭 Overview An authenticated Remote Code Execution RCE vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to execute arbitrary code on the server. By...
POC-CVE-2026-58048
CVE-2026-58048 CVSS 4.0: 9.4（严重） | CWE-89: SQL 注入 | NVD 已认证的 cPanel 用户 → 通过数据库重命名，以 MySQL root 身份执行任意 SQL。 cPanel 在以 root 身份执行重命名操作时，不当保留了用户的会话 sqlmode（ANSIQUOTES）——数据库名中的反引号可逃逸出标识符并注入 SQL。 name: db; GRANT ALL ON . TO 'rce'@'%' IDENTIFIED BY 'pwned!'; -- 快速开始（Docker 实验环境） pip install -r...
CVE-2026-100683 Budibase before 3.45.0 SQL Injection via column-rename DDL
Budibase @budibase/server before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/backend-core/src/sql/sqlTable.ts by interpolating identifiers directly into a raw query string backtick-quoted for MySQL, a single-quoted sprename literal for MSSQL without applying the project's...
CVE-2026-100683 Budibase before 3.45.0 SQL Injection via column-rename DDL
Budibase @budibase/server before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/backend-core/src/sql/sqlTable.ts by interpolating identifiers directly into a raw query string backtick-quoted for MySQL, a single-quoted sprename literal for MSSQL without applying the project's...
AZL-104747 CVE-2026-97594 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and then dereferences it in collectdomainaccesses and in the audit record. ...
CVE-2026-97594
The Linux kernel contains a use-after-free vulnerability in the landlock LSM. The current_check_refer_path() function reads old_dentry->d_parent without holding a reference or lock, leading to a race condition during filename_linkat(). Because hook_path_link() does not lock the parent, a concu...
CVE-2026-97594 landlock: Fix use-after-free of the source's parent directory
In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and then dereferences it in collectdomainaccesses and in the audit record. ...
Linux Distros Unpatched Vulnerability : CVE-2026-97594
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and th...
CVE-2026-86867
Cinnamon's Kotaemon (all versions up to and including v0.12.0 ) contains multiple vulnerabilities in its multi-user chat interface due to incorrect authorization and improper access controls . Four handler methods in libs/ktem/ktem/pages/chat/control.py (specifically select_conv, delete_conv, ren...
CVE-2026-93368
The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL Injection via 'log' Username Parameter in all versions up to, and including, 2.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...
CVE-2026-93368 Rename wp-login.php to anything you want <= 2.0.1 - Unauthenticated SQL Injection via 'log' (Username) Parameter
The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL Injection via 'log' Username Parameter in all versions up to, and including, 2.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...
CVE-2026-93368 Rename wp-login.php to anything you want <= 2.0.1 - Unauthenticated SQL Injection via 'log' (Username) Parameter
The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL Injection via 'log' Username Parameter in all versions up to, and including, 2.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...
EUVD-2026-85169
The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL Injection via 'log' Username Parameter in all versions up to, and including, 2.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...
CVE-2026-93368
The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to a time-based SQL Injection in all versions up to and including 2.0.1 . The root cause is insufficient escaping and a lack of sufficient preparation on the existing SQL query for the 'log' (Username) parameter. Beca...
WordPress Rename wp-login.php to anything you want plugin <= 2.0.1 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by nthng in WordPress Plugin Rename wp-login.php to anything you want versions = 2.0.1...