79 matches found
CVE-2024-7627-PoC
CVE-2024-7627-PoC Antecedentes Este script de Prueba de Concepto PoC es para el plugin de WordPress Bit File Manager versión 6.0 - 6.5.5, que presenta una vulnerabilidad de Ejecución Remota de Código no autenticada mediante Condición de Carrera CVE-2024-7627. Información Descripción: El plugin Bi...
CVE-2024-8743-PoC
CVE-2024-8743 PoC Antecedentes Script de prueba de concepto PoC para el complemento de WordPress Bit File Manager versión = 6.5.7, vulnerabilidad de carga limitada de archivos JavaScript autenticada suscriptor+ CVE-2024-8743 Información Descripción: El complemento de WordPress Bit File Manager –...
CVE-2024-7627
Exploit for CVE-2024-7627 — Bit File Manager WordPress Unauthenticated RCE Exploit 📌 Description This repository contains a proof-of-concept PoC exploit for CVE-2024-7627 , a critical Unauthenticated Remote Code Execution RCE vulnerability in the Bit File Manager WordPress plugin versions 6.0 –...
WordPress Bit File Manager plugin < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch vulnerability
Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch vulnerability discovered by Artus KG in WordPress Plugin Bit File Manager versions 6.9.1...
WordPress Bit File Manager plugin < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector vulnerability
Subscriber+ Sensitive Data Disclosure via bitappsfmconnector vulnerability discovered by JING QIAN in WordPress Plugin Bit File Manager versions 6.9.1...
WordPress Bit File Manager plugin < 6.9.1 - Unauthenticated File Activity Log Disclosure vulnerability
Unauthenticated File Activity Log Disclosure vulnerability discovered by Farid Narimanov in WordPress Plugin Bit File Manager versions 6.9.1...
CVE-2026-17542
The File Manager WordPress plugin (versions before 6.9.1 ) contains a vulnerability in the bitapps_fm_connector endpoint. Due to a missing capability check , any authenticated user, such as a subscriber , can browse the entire WordPress installation directory. This allows attackers to download sp...
CVE-2026-17542 Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector
The File Manager WordPress plugin before 6.9.1 does not perform any capability check on one of its file manager connector endpoints, allowing any authenticated user, such as a subscriber, to browse the entire WordPress installation directory and download files of certain types from it, including...
CVE-2026-17541 Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure
The File Manager WordPress plugin before 6.9.1 does not have authorisation checks on one of its REST API routes, allowing unauthenticated users to read its file activity log, disclosing the file operations performed on the site, the paths involved and the name of the user who performed them...
CVE-2026-17541
The Bit File Manager WordPress plugin (versions before 6.9.1 ) is vulnerable to an unauthenticated file activity log disclosure due to missing authorization checks on a REST API route. This allows unauthorized actors to view logs of file operations performed on the site, including specific file p...
CVE-2026-17540 Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch
The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory, which could lead to the disclosure of the site's...
CVE-2026-17541 Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure
The File Manager WordPress plugin before 6.9.1 does not have authorisation checks on one of its REST API routes, allowing unauthenticated users to read its file activity log, disclosing the file operations performed on the site, the paths involved and the name of the user who performed them...
CVE-2026-17540 Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch
The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory, which could lead to the disclosure of the site's...
CVE-2026-17540
The Bit File Manager WordPress plugin (versions
CVE-2026-35170
openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in BitParser::parseHeader that allows out-of-bounds heap memory access when parsing a crafted .bit file. No FPGA hardware is required to trigger this vulnerability...
CVE-2026-35170
openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in BitParser::parseHeader that allows out-of-bounds heap memory access when parsing a crafted .bit file. No FPGA hardware is required to trigger this vulnerability...
CVE-2026-35170 openFPGALoader has a heap buffer overflow in BitParser::parseHeader() via crafted .bit file
openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in BitParser::parseHeader that allows out-of-bounds heap memory access when parsing a crafted .bit file. No FPGA hardware is required to trigger this vulnerability...
CVE-2026-35170: Out-of-bounds Read
openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in BitParser::parseHeader that allows out-of-bounds heap memory access when parsing a crafted .bit file. No FPGA hardware is required to trigger this vulnerability...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2022-48828)
NFSD: Vulnerability caused by an underflow in iasize due to a mismatch between signed and unsigned 64-bit file size values, which can cause issues when handling large file sizes from NFS clients. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...
