54444 matches found
📄 Casdoor 3.54.1 Arbitrary File Write / Shell Upload
This Python3 script exploits a path traversal flaw in Casdoor version 3.54.1 that allows an authenticated attacker to write files anywhere on the server via a misconfigured storage provider. If written to an executable location, a shell can be minted...
EUVD-2026-36986
Contributor Arbitrary File Deletion in Link Library = 7.8.8 versions...
EUVD-2026-36978
Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi Save Entries, File Upload & Country Code Field = 1.0.6 versions...
EUVD-2026-36981
Unauthenticated Arbitrary File Upload in GeekyBot = 1.2.2 versions...
EUVD-2026-36959
Subscriber Arbitrary File Upload in WpStream 4.11.2 versions...
EUVD-2026-36971
Sales Representative Arbitrary File Deletion in Groundhogg = 4.4 versions...
EUVD-2026-36969
Subscriber Arbitrary File Upload in WP-BusinessDirectory = 4.0.0 versions...
EUVD-2026-36933
Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework = 5.11.1 versions...
EUVD-2026-36941
Author Arbitrary File Download in Download Monitor = 5.1.9 versions...
EUVD-2026-36771
An arbitrary file upload vulnerability in the attachment handling component of flatnotes v5.5.4 allows attackers to execute arbitrary code via uploading a crafted HTML or SVG file...
Remotion: arbitrary file write vulnerability
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability...
Write-what-where Condition
Overview @remotion/studio-server is a Run a Remotion Studio with a server backend Affected versions of this package are vulnerable to Write-what-where Condition via the file write process. An attacker can overwrite or create arbitrary files by sending specially crafted input to the application...
NPM: Remotion: arbitrary file write vulnerability
NPM: Remotion: arbitrary file write vulnerability discovered by ? in WordPress Npm remotion versions 4.0.410...
GHSA-G6PC-6676-C23J Remotion: arbitrary file write vulnerability
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability...
EUVD-2026-36744
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability...
CVE-2026-49061
Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce = 3.2.1 versions...
CVE-2026-40779
Contributor Arbitrary File Deletion in Link Library = 7.8.8 versions...
CVE-2026-39591
Subscriber Arbitrary File Upload in WP-BusinessDirectory = 4.0.0 versions...