CVE-2024-7627-PoC

CVE-2024-7627-PoC Antecedentes Este script de Prueba de Concepto PoC es para el plugin de WordPress Bit File Manager versión 6.0 - 6.5.5, que presenta una vulnerabilidad de Ejecución Remota de Código no autenticada mediante Condición de Carrera CVE-2024-7627. Información Descripción: El plugin Bi...

CVE-2024-7627

Exploit para CVE-2024-7627 — Bit File Manager WordPress RCE no autenticado 📌 Descripción Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2024-7627 , una vulnerabilidad crítica de Ejecución Remota de Código RCE no autenticada en el plugin de WordPress Bit File Manager...

EUVD-2026-63326

Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, where the checkSyntax and runPlaywrightTest functions unsafely interpolate caller-controlled absolutePath values into shell commands, enabling arbitrary OS...

CVE-2026-18482

CVE-2026-18482 is a command injection vulnerability in Neo.mjs , specifically within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server. The checkSyntax() and runPlaywrightTest() functions unsafely interpolate caller-controlled absolutePath values into shell commands,...

CVE-2024-7627

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated...

CVE-2024-7627

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated...