71 matches found
CVE-2025-48799
설명 이것은 Windows 업데이트 서비스의 권한 상승 취약점인 CVE-2025-48799에 대한 PoC입니다. 이 취약점은 최소 2개의 하드 드라이브가 있는 Windows 클라이언트win11/win10에 영향을 미칩니다. 시스템에 여러 하드 드라이브가 있는 경우 Storage Sense를 사용하여 새 콘텐츠가 저장되는 위치를 변경할 수 있습니다. 새 응용 프로그램의 위치가 보조 드라이브로 변경된 경우, 새 응용 프로그램을 설치하는 동안 wuauserv 서비스가 심볼릭 링크를 확인하지 않고 임의의 폴더 삭제를 수행합니다파일이...
CVE-2025-48799
설명 이것은 Windows Update 서비스의 권한 상승 취약점인 CVE-2025-48799에 대한 PoC입니다. 이 취약점은 하드 드라이브가 2개 이상 있는 Windows 클라이언트win11/win10에 영향을 미칩니다. 머신에 여러 하드 드라이브가 있는 경우 Storage Sense를 사용하여 새 콘텐츠가 저장되는 위치를 변경할 수 있습니다. 새 애플리케이션의 위치가 보조 드라이브로 변경되면, 새 애플리케이션 설치 중에 wuauserv 서비스가 심볼릭 링크를 확인하지 않고 임의 폴더 삭제를 수행합니다파일이 발견되면 서비스...
CVE-2025-12656
The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation in the deletecancelstagingsite function in all versions up to, and including, 0.9.128. This makes it possible for authenticated...
CVE-2026-1883: Authorization Bypass Through User-Controlled Key
The Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the deletefolders function due to missing validation on a user controlled key. This makes it possibl...
CVE-2025-34290 Versa SASE Client for Windows < 7.9.5 Arbitrary Folder Deletion Leading to Local Privilege Escalation
Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating...
CVE-2025-13377
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the getcachedirforpagefromurl function in all versions up to, and including, 2.32.7. This makes it possible for...
EUVD-2025-201539
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the getcachedirforpagefromurl function in all versions up to, and including, 2.32.7. This makes it possible for...
CVE-2025-13377 10Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the getcachedirforpagefromurl function in all versions up to, and including, 2.32.7. This makes it possible for...
CVE-2025-13377
The vulnerability CVE-2025-13377 affects the WordPress plugin “10Web Booster – Website speed optimization, Cache & Page Speed optimizer”, specifically in get_cache_dir_for_page_from_url() across all versions up to and including 2.32.7. The underlying issue is insufficient file path validation, en...
CVE-2025-13377 10Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the getcachedirforpagefromurl function in all versions up to, and including, 2.32.7. This makes it possible for...
CVE-2025-13377: Improper Limitation of a Pathname to a Restricted Directory
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the getcachedirforpagefromurl function in all versions up to, and including, 2.32.7. This makes it possible for...
PT-2025-49354
Name of the Vulnerable Software and Affected Versions 10Web Booster versions prior to 2.32.8 Description The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is susceptible to arbitrary folder deletion due to inadequate file path validation within the...
EUVD-2021-11933
Malware in sbrugna...
EUVD-2023-28589
Malicious code in bioql PyPI...
EUVD-2022-32969
Malicious code in bioql PyPI...
EUVD-2022-29552
Malicious code in bioql PyPI...
EUVD-2024-16551
Malicious code in bioql PyPI...
CVE-2025-6989 Kallyas <= 4.21.0 - Authenticated (Contributor+) Arbitrary Folder Deletion
The Kallyas theme for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the deletefont function in all versions up to, and including, 4.21.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete...
CVE-2025-6989
CVE-2025-6989 (KALLYAS theme for WordPress) is an authenticated (Contributor+) vulnerability in all versions up to 4.21.0 where delete_font() uses insufficient file-path validation, enabling an attacker to delete arbitrary folders on the server. The issue, with CVSS 3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:...
