CVE-2019-1315

Windows Error Reporting Manager – Erweiterung von Berechtigungen durch beliebiges Verschieben von Dateien Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html Sie benötigen die NtApiDotNet-Bibliothek sowie eine gültige Report.wer-Datei. Beide müssen sich ...

CVE-2020-0668

CVE-2020-0668 Verwenden Sie CVE-2020-0668, um einen beliebigen privilegierten Dateiverschiebungsvorgang durchzuführen. Verwenden Sie https://github.com/itm4n/UsoDllLoader Windows = 1903 ODER https://github.com/xct/diaghub Windows 1903 zur Privilege Escalation. Demo Links & Ressourcen...

CVE-2026-77757 Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission

Directorist (AI-Powered Business Directory, Listings & Classified Ads) WordPress plugin versions 8.5 through 8.9.2 are affected by an arbitrary image file move vulnerability via the REST v2 Listing Submission endpoint. The root cause is a missing sanitization check on a user-supplied image refere...

parallels-file-move-privesc

parallels-file-move-privesc Este repositório contém um exploit para CVE-2023-50226 / ZDI-CAN-21227, que pode ser usado para escalar privilégios para root usando o Parallels Desktop em versões anteriores a 18.3.2...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox anterior à versão 7.0.16 é vulnerável a escalada de privilégios local via seguimento de link simbólico, levando à exclusão arbitrária de arquivos e movimentação arbitrária de arquivos. O VirtualBox tenta mover arquivos de log como NT AUTHORITY\SYSTEM em...

SysTracingPoc

SysTracingPoc CVE-2020-0668 - Sicherheitslücke in Microsoft Windows Service Tracing zur lokalen Rechteausweitung durch Verschieben beliebiger Dateien Für weitere Informationen: https://itm4n.github.io/cve-2020-0668-windows-service-tracing-eop/...

RazerEoP

RazerEoP PoC para exclusão/movimentação arbitrária de arquivos no módulo Macro do Razer Synapse 3. Este módulo permite ao usuário exportar macros criadas para um arquivo no disco, e a operação de arquivo é feita via serviço da razer que executa como nt authority\system. Tentei relatar isso à raze...

MoveEdr

MoveEDR Se você é administrador, pode forçar o Windows a excluir ou mover pastas e arquivos imediatamente após a inicialização, antes que os serviços sejam iniciados. Isso pode ser usado para desabilitar EDRs. Uso !CAUTION Há um problema com o CrowdStrike que resulta em um loop de inicialização c...

WordPress Simple File List plugin <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability

Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability discovered by Sanjar Tulkinov in WordPress Plugin Simple File List versions = 6.3.11...

CVE-2026-16616 Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

CVE-2026-16616

CVE-2026-16616 affects the Simple File List WordPress plugin through version 6.3.11 . The root cause is a missing validation of the source path in a file-move operation that is reachable by unauthenticated users. This allows an attacker to read arbitrary files on the server (sensitive information...

CVE-2026-47231

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php gates state-changing modes by checking that the actor has hasUploadRight on the URL parameter folderuuid. The movesave handler then operates on a separate URL parameter fileuuid and calls...

EUVD-2026-55477

In the Linux kernel, the following vulnerability has been resolved: audit: fix recursive locking deadlock in auditdupeexe A deadlock occurs in the audit subsystem when duplicating executable-related rules. When a file is moved e.g., via dorenameat2, the VFS layer locks the parent directory...

CVE-2026-68096

CVE-2026-68096 (Linux kernel) affects the audit subsystem. A deadlock can occur when duplicating executable-based audit rules during a file move (e.g., via do_renameat2) if an fsnotify_move event triggers audit_dupe_exe/audit_alloc_mark which attempts to resolve the path using kern_path_parent wh...

EUVD-2026-51398

CodeIgniter: Path traversal in UploadedFile::move when using client-provided filenames...

CVE-2026-63222

CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, calling UploadedFile::move without a second argument uses the client-provided filename without sanitization, allowing a remote attacker to use path traversal sequences to write uploaded content outside the intended directory when the...

CVE-2026-63222 CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames

CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, calling UploadedFile::move without a second argument uses the client-provided filename without sanitization, allowing a remote attacker to use path traversal sequences to write uploaded content outside the intended directory when the...

CVE-2026-63222

CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, calling UploadedFile::move without a second argument uses the client-provided filename without sanitization, allowing a remote attacker to use path traversal sequences to write uploaded content outside the intended directory when the...

CVE-2026-10834

The CVE covers the WP Travel Engine WordPress plugin (pre-6.8.1) where input validation for a user-supplied profile image path is insufficient before the file is moved. The vulnerability allows authenticated users with subscriber-level access or higher to relocate arbitrary files within the WordP...

CVE-2026-10834 WP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_image

The WP Travel Engine WordPress plugin before 6.8.1 does not properly validate the source of a user-supplied profile image path before moving the file, allowing authenticated users with subscriber-level access and above to relocate arbitrary files within the WordPress uploads directory into their...