GrafTraverse-CVE-2021-43798

GrafTraverse - CVE-2021-43798 Framework di Exploitation MiNi Strumento di automazione da riga di comando per test di sicurezza autorizzati di Grafana Directory Traversal CVE-2021-43798. Panoramica CVE-2021-43798 è una vulnerabilità di directory traversal non autenticata in Grafana 8.x che consent...

CVE-2021-3019

CVE-2021-3019 CVE-2021-3019 Vulnerabilità di directory traversal e lettura arbitraria di file in lanproxy Utilizzo Download root@kitploit: git clone https://github.com/FanqXu/CVE-2021-3019.git cd CVE-2021-3019 Aiuto Eseguire senza parametri mostra il messaggio di aiuto Singolo URL Esegue la...

CVE-2023-2825-Gitlab

CVE-2023-2825 Il 23 maggio 2023, GitLab ha rilasciato la versione 16.0.1 che ha corretto una vulnerabilità critica, CVE-2023-2825, che interessava la versione 16.0.0 della Community Edition CE e della Enterprise Edition EE. La vulnerabilità consente a utenti non autenticati di leggere file...

CVE-2023-0157

CVE ID : CVE-2023-0157 Schwachstellentyp : Directory Traversal Beschreibung : Das All-In-One Security AIOS-Plugin für WordPress ist in Versionen bis einschließlich 5.1.4 anfällig für Directory Traversal. Dies ermöglicht authentifizierten Angreifern mit Administratorrechten, den Inhalt beliebiger...

CVE-2020-19360

Vulnerabilità di lettura arbitraria di file Fhem FileLoglogWrapper CVE-2020-19360 Descrizione della vulnerabilità FHEM nella versione 6.0 presenta una vulnerabilità di inclusione di file. La vulnerabilità risiede nel parametro file di FHEM/FileLoglogWrapper che consente a un attaccante di include...

CVE-2020-12116

CVE-2020-12116 Codice proof-of-concept per sfruttare CVE-2020-12116: lettura arbitraria di file non autenticata su ManageEngine OpManger. Riepilogo L'ultima versione di OpManager contiene una vulnerabilità di directory traversal che consente l'accesso illimitato a tutti i file nell'applicazione...

CVE-2025-30208

CVE-2025-30208 Una PoC dello script di exploit per la vulnerabilità di Lettura Arbitraria di File di Vite /@fs/ Path Traversal in transformMiddleware CVE-2025-30208. L'analisi dettagliata è disponibile in questo post. Vulnerabile nelle versioni precedenti a : 6.2.3 6.1.2 6.0.12 5.4.15 4.5.10...

EventLogin-CVE-2025-29969

EventLogin - CVE-2025-29969 EventLogin ist eine Time-of-Check-Time-of-Use-Schwachstelle im MS-EVEN-Protokoll. Die Schwachstelle ermöglicht es niedrig privilegierten Benutzern, beliebige Dateien auf einem entfernten Rechner zu schreiben, wodurch die Notwendigkeit eines Administratorkontos für eine...

CVE-2026-18431

The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...

CVE-2026-77757

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

CVE-2026-75797

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

CVE-2026-18431 Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write

The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...

EUVD-2026-66293

The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...

CVE-2026-18431

The Avada WordPress theme (≤ 7.16) combined with the Fusion Builder plugin (≤ 3.16) is vulnerable to unauthenticated Remote Code Execution via a chain of six authorization and input validation weaknesses enabling arbitrary file write. An attacker can create and execute arbitrary PHP files, leadin...

EUVD-2026-66287

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

CVE-2026-77757 Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

CVE-2026-77757

CVE-2026-77757 affects the Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin (versions 8.5 through 8.9.2 ). The plugin fails to sanitize a user-supplied image reference before using it as the source of a file move via the REST v2 Listing Submission endpoint. A...

CVE-2026-77757 Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

CVE-2026-77693

The Order Tip for WooCommerce WordPress plugin (versions before 1.6.0 ) contains an arbitrary file deletion vulnerability in the delete_exported_csv_file_ajax function. The plugin fails to verify the requesting user's capability or restrict the file path, allowing authenticated users with the Sho...

CVE-2026-77693 Order Tip for WooCommerce < 1.6.0 - Shop Manager+ Arbitrary File Deletion via delete_exported_csv_file_ajax

The Order Tip for WooCommerce WordPress plugin before 1.6.0 does not check the capability of the user requesting a file deletion, nor does it restrict which path may be deleted, allowing users with the Shop Manager role and above to delete arbitrary files on the server, which could lead to the si...