CVE-2025-34085-Multi-target

CVE-2025-34085 다중 대상 RCE 스캐너 CVE-2025-34085 대량 익스플로잇 스캐너 — WordPress Simple File List 플러그인의 인증되지 않은 원격 코드 실행 취약점입니다. 이 도구는 PHP 페이로드를 이미지로 위장하여 업로드하고, 취약한 파일 엔진을 통해 이름을 변경한 후, 사용자 지정 명령으로 셸 실행을 트리거합니다. 대규모 대상 세트에 대한 멀티스레드 스캐닝을 지원합니다. 🔥 기능 다중 대상 스캐닝 targets.txt에서 악성 페이로드 자동 업로드 및 이름 변경 사용자 정의 가능한...

Simple File List < 6.1.13 - Reflected Cross-Site Scripting

Simple File List WordPress plugin \u003C 6.1.13 contains a reflected cross-site scripting caused by unsanitized URL output in an attribute, letting attackers execute malicious scripts in admin browsers, exploit requires victim to be an admin. id: CVE-2024-10146 info: name: Simple File List 6.1.13...

Simple File List < 4.4.12 - Cross Site Scripting

The plugin does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting id: CVE-2022-3062 info: name: Simple File List 4.4.12 - Cross Site Scripting author: r3Y3r53 severity: medium description: | The plugin does not escape parameters before...

WordPress Simple File List - Path Traversal

Simple File List plugin allows path traversal via file upload, enabling files to be written outside the upload directory. id: CVE-2020-12832 info: name: WordPress Simple File List - Path Traversal author: riteshs4hu severity: critical description: | Simple File List plugin allows path traversal v...

simple-file-list-rce

simple-file-list-rce Simple File List 4.2.3 - 인증되지 않은 임의 파일 업로드 RCE root@kitploit: usage: simple.py -h -u URL -f1 FILE1 -f2 FILE2 -p PATH optional arguments: -h, --help show this help message and exit -u URL, --url URL Wordpress Url i.e https://wordpress.lan -f1 FILE1, --file1 FILE1 Harmless File...

CVE-2025-34085

CVE-2025-34085 — Неаутентифицированное удаленное выполнение кода в WordPress Simple File List Автоматизированный эксплойт для CVE-2025-34085 дубликат CVE-2020-36847, критической уязвимости неаутентифицированного удаленного выполнения кода в плагине WordPress Simple File List версий ≤ 4.2.2...

CVE-2025-34085

📂 Simple File List – 인증되지 않은 RCE 익스플로잇 CVE-2025-34085 ⚠️ 익스플로잇 코드 작성자: Mrj Haxcore WordPress Simple File List 플러그인= 4.2.3에 대한 완전히 작동하는 Python 익스플로잇입니다. 이 플러그인은 안전하지 않은 파일 업로드 및 이름 변경 로직으로 인해 인증되지 않은 원격 코드 실행RCE 취약점이 있습니다. 💣 취약점 요약 플러그인 : Simple File List simple-file-list 버전 : = 4.2.3 CVE :...

CVE-2025-34085

Cyberlone Indonesia 🛠️ Сканер RCE для WordPress Simple File List + Автоочистка Автоматический инструмент для обнаружения и эксплуатации удаленного выполнения кода RCE без аутентификации в плагине WordPress Simple File List , особенно уязвимых к CVE-2025-34085. Оснащен системой автоматической...

CVE-2022-1119

CVE-2022-1119 1. 소개 WordPress Simple File List 3.2.8 FileRead POC 2. 사용법 root@kitploit: poc -f host.txt // 批量扫描 poc -h 192.168.1.1 // 单个扫描 3. 면책 조항 이 도구는 학습, 연구 및 자체 점검 목적으로만 사용해야 합니다. 불법적인 목적으로 사용하지 마시고 관련 법률 및 규정을 준수하십시오. 이 도구를 사용하여 발생하는 모든 위험은 작성자와 무관합니다...

CVE-2025-34085

CVE-2025-34085 — Эксплойт для неаутентифицированного удаленного выполнения кода в WordPress Simple File List Автоматизированный эксплойт и сканер для CVE-2025-34085 — критической уязвимости в плагине WordPress Simple File List , позволяющей неаутентифицированное удаленное выполнение кода через...

By-Poloss..-..CVE-2026-11912

CVE-2026-11912: Simple File List = 6.3.7 - Отсутствие авторизации приводит к неавторизованному изменению файлов Краткое описание...

CVE-2026-70459

A flaw was found in rsync. A remote attacker could send a specially crafted file list to the rsync daemon. This could lead to a null pointer dereference, causing the daemon to crash and resulting in a Denial of Service DoS. Mitigation To mitigate this issue, restrict network access to the rsync...

BIT-JOOMLA-2026-73373 Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2

Joomla! Core - 20260810 - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dangerous files did not include SHTML files. On servers that executed these files, that could lead to code execution...

EUVD-2026-66343

CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure...

CVE-2026-80234

CAYIN CMS-WS and CMS-SE , developed by CAYIN Technology, are affected by a Missing Authentication vulnerability. An unauthenticated remote attacker can leverage a specific functionality to obtain media file lists , resulting in partial information disclosure . The CNA TW CERT assigned a CVSS 3.1 ...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Stored XSS via File Description vulnerability

Unauthenticated Stored XSS via File Description vulnerability discovered by Ruwantha Harshamal in WordPress Plugin Simple File List versions = 6.3.11...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability

Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability discovered by Sanjar Tulkinov in WordPress Plugin Simple File List versions = 6.3.11...

EUVD-2026-62936

In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the add listitem action in a Safe Mode playbook while that action is listed as read-only, which could allow for unauthorized changes to file lists. The vulnerability is...

CVE-2026-76371

In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the add listitem action in a Safe Mode playbook while that action is listed as read-only, which could allow for unauthorized changes to file lists. The vulnerability is...

CVE-2026-76371 Incorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAR

In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the add listitem action in a Safe Mode playbook while that action is listed as read-only, which could allow for unauthorized changes to file lists. The vulnerability is...