9059 matches found
CVE-2025-68554 WordPress Keenarch theme < 2.0.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Keenarch keenarch allows Using Malicious Files.This issue affects Keenarch: from n/a through 2.0.1...
CVE-2025-68554 WordPress Keenarch theme < 2.0.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Keenarch keenarch allows Using Malicious Files.This issue affects Keenarch: from n/a through 2.0.1...
GHSA-HHJV-JQ77-CMVX zeptoclaw has Android device shell blocklist bypass via argument permutation
Summary zeptoclaw implements a blocklist to prevent dangerous commands running in android device shell, but this blocklist has several blocked commands with argements in the pattern literal, such as rm -f and rm -rf, this can be simply bypassed by using different orders for these arguments, such ...
zeptoclaw has Android device shell blocklist bypass via argument permutation
Summary zeptoclaw implements a blocklist to prevent dangerous commands running in android device shell, but this blocklist has several blocked commands with argements in the pattern literal, such as rm -f and rm -rf, this can be simply bypassed by using different orders for these arguments, such ...
WordPress plugin WooCommerce License Manager 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...
PT-2026-23403
Unrestricted Upload of File with Dangerous Type vulnerability in WP Chill Filr filr-protection allows Upload a Web Shell to a Web Server.This issue affects Filr: from n/a through = 1.2.12...
PT-2026-23222
Name of the Vulnerable Software and Affected Versions zozothemes Charety versions prior to 2.0.2 Description The software contains a flaw that permits the upload of files with dangerous types. This allows the use of malicious files. Recommendations Update to a version newer than 2.0.2...
WordPress plugin Keenarch 代码问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
WordPress plugin Lendiz 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...
PT-2026-23387
Unrestricted Upload of File with Dangerous Type vulnerability in firassaidi WooCommerce License Manager fs-license-manager allows Upload a Web Shell to a Web Server.This issue affects WooCommerce License Manager: from n/a through = 7.0.6...
PT-2026-23140
Name of the Vulnerable Software and Affected Versions Lendiz versions prior to 2.0.1 Description The software contains a flaw due to unrestricted file upload with a dangerous type, allowing the upload of a web shell to a web server. Recommendations Update to a version newer than or equal to 2.0.1...
WordPress plugin Nutrie 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...
WordPress plugin AI Engine 代码问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. There is a...
PT-2026-23219
Name of the Vulnerable Software and Affected Versions Jordy Meow AI Engine versions through 3.3.2 Description The software contains an unrestricted file upload issue that allows the use of malicious files. The vulnerability involves the ability to upload files of dangerous types. Recommendations...
PT-2026-23142
Name of the Vulnerable Software and Affected Versions Nutrie versions prior to 2.0.1 Description A flaw exists in Nutrie that permits the unrestricted upload of files with dangerous types, potentially allowing an attacker to upload a web shell to a web server. Recommendations Update Nutrie to...
Astroid Template Framework 代码问题漏洞
Astroid Template Framework is an open-source Joomla template development framework developed by Astroid. The Astroid Template Framework has code vulnerabilities, which stem from inadequate protection of the file management function. This could allow unverified users to upload dangerous data types...
PT-2026-23436
Name of the Vulnerable Software and Affected Versions Astroid Framework versions 2.0.0 through 3.3.10 Description An improperly secured file management feature permits the upload of dangerous data types by unauthenticated users, potentially resulting in remote code execution. The vulnerability...
PT-2026-23141
Name of the Vulnerable Software and Affected Versions Keenarch versions prior to 2.0.1 Description Keenarch is susceptible to a file upload issue that permits the use of malicious files. The vulnerability allows for unrestricted uploads of files with dangerous types. Recommendations Update Keenar...
Exploit for Unrestricted Upload of File with Dangerous Type in Getgrav Grav
No d...
GHSA-82G8-464F-2MV7 OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)
Summary applySkillConfigEnvOverrides previously copied skills.entries..env values into the host process.env without applying the host env safety policy. Impact In affected versions, dangerous process-level variables such as NODEOPTIONS could be injected when unset, which can influence...