CVE-2024-7627

Exploit para CVE-2024-7627 — Exploit de RCE não autenticado no Bit File Manager WordPress 📌 Descrição Este repositório contém um exploit de prova de conceito PoC para CVE-2024-7627 , uma vulnerabilidade crítica de Execução Remota de Código RCE não autenticada no plugin WordPress Bit File Manager...

CVE-2024-7627-PoC

CVE-2024-7627-PoC Contesto Questo script Proof-of-Concept PoC riguarda la vulnerabilità di Esecuzione di Codice Remoto non autenticata tramite race condition CVE-2024-7627 nel plugin WordPress Bit File Manager versioni 6.0 - 6.5.5. Informazioni Descrizione: Il plugin Bit File Manager per WordPres...

EUVD-2026-63326

Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, where the checkSyntax and runPlaywrightTest functions unsafely interpolate caller-controlled absolutePath values into shell commands, enabling arbitrary OS...

CVE-2026-18482

Neo.mjs contains a command injection vulnerability in the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server. The checkSyntax() and runPlaywrightTest() functions unsafely interpolate caller-controlled absolutePath values into shell commands, enabling arbitrary OS command ...

CVE-2024-7627

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated...

CVE-2024-7627

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated...