CVE-2024-7627

CVE-2024-7627 익스플로잇 — Bit File Manager WordPress 비인증 RCE 익스플로잇 📌 설명 이 저장소는 Bit File Manager WordPress 플러그인버전 6.0 – 6.5.5에서 발견된 치명적인 비인증 원격 코드 실행RCE 취약점인 CVE-2024-7627 에 대한 개념 증명PoC 익스플로잇을 포함합니다. Guest User Read 기능이 활성화되면 플러그인은 checkSyntax 함수 내부에 레이스 컨디션을 노출합니다. 이 함수는 검증 전에 임시 PHP 파일을...

CVE-2024-7627-PoC

CVE-2024-7627-PoC Общие сведения Этот Proof-of-Concept PoC скрипт предназначен для эксплуатации уязвимости неаутентифицированного удалённого выполнения кода через состояние гонки CVE-2024-7627 в плагине Bit File Manager для WordPress версий 6.0 - 6.5.5. Информация Описание: Плагин Bit File Manage...

EUVD-2026-63326

Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, where the checkSyntax and runPlaywrightTest functions unsafely interpolate caller-controlled absolutePath values into shell commands, enabling arbitrary OS...

CVE-2026-18482

CVE-2026-18482 is a command injection vulnerability in Neo.mjs , specifically within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server. The checkSyntax() and runPlaywrightTest() functions unsafely interpolate caller-controlled absolutePath values into shell commands,...

CVE-2024-7627

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated...

CVE-2024-7627

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated...