Lucene search
+L

9 matches found

Kitploit
Kitploit
added 2026/09/14 7:56 p.m.9 views

android_kernel_xiaomi_sunny

Linux カーネル このファイルは Documentation/admin-guide/README.rst に移動されました。 カーネル開発者とユーザー向けのガイドがいくつかあることに注意してください。 これらのガイドは、HTML や PDF などのさまざまな形式で表示できます。 ドキュメントをビルドするには、make htmldocs または make pdfdocs を使用してください。 Documentation/ サブディレクトリにはさまざまなテキストファイルがあり、 そのいくつかは Restructured Text マークアップ表記を使用しています。...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2026/08/26 6:00 a.m.8 views

EUVD-2026-66287

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

5.4CVSS5.7AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.12 views

PT-2026-81967

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

5.7AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.22 views

PT-2026-78285

Name of the Vulnerable Software and Affected Versions Simple File List WordPress plugin versions prior to 6.3.12 Description Unauthenticated users can exploit a lack of validation in the source path of a file-move operation. This allows an attacker to read arbitrary files on the server and reloca...

8.6CVSS5.5AI score0.00543EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/07 6:16 a.m.28 views

CVE-2026-10834

The WP Travel Engine WordPress plugin before 6.8.1 does not properly validate the source of a user-supplied profile image path before moving the file, allowing authenticated users with subscriber-level access and above to relocate arbitrary files within the WordPress uploads directory into their...

4.6CVSS0.00245EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/25 3:50 p.m.44 views

CVE-2026-45233 HTMLy CMS 3.1.1 Path Traversal via oldfile Parameter in Autosave

HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to relocate arbitrary files by supplying directory traversal sequences in the oldfile parameter at the admin autosave endpoint. Attackers can pass unsanitized traversal sequences...

8.1CVSS0.009EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/25 3:50 p.m.12 views

CVE-2026-45233 HTMLy CMS 3.1.1 Path Traversal via oldfile Parameter in Autosave

HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to relocate arbitrary files by supplying directory traversal sequences in the oldfile parameter at the admin autosave endpoint. Attackers can pass unsanitized traversal sequences...

7.2CVSS6.1AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/06/25 3:50 p.m.10 views

CVE-2026-45233

HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to relocate arbitrary files by supplying directory traversal sequences in the oldfile parameter at the admin autosave endpoint. Attackers can pass unsanitized traversal sequences...

8.1CVSS6AI score0.009EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/25 3:50 p.m.16 views

EUVD-2026-39459

HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to relocate arbitrary files by supplying directory traversal sequences in the oldfile parameter at the admin autosave endpoint. Attackers can pass unsanitized traversal sequences...

8.1CVSS6AI score0.009EPSS
SaveExploits0References2
Rows per page
Query Builder