CVE-2026-77757

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

CVE-2026-75797

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

CVE-2024-2928

CVE-2024-2928 CVE-2024-2928 के लिए mlflow में मनमाना फ़ाइल पढ़ने का एक्सप्लॉइट विशेष रूप से संस्करण 2.9.2 में, जिसे संस्करण 2.11.3 में ठीक किया गया था एक्सप्लॉइट कोड का Linux पर परीक्षण किया गया स्रोत: https://huntr.com/bounties/19bf02d7-6393-4a95-b9d0-d6d4d2d8c298 उपयोग python3 CVE-2024-2928.py ...

CVE-2018-7422

CVE-2018-7422 CVE-2018-7422 के लिए शोषण: WordPress Plugin Site Editor 1.1.1 में स्थानीय फ़ाइल समावेशन T1574.008 वाक्यविन्यास root@kitploit: ruby प्रयोगशाला वातावरण OffSec Proving Grounds - Readys उपयोग...

CVE-2014-5284

CVE-2014-5284 CVE-2014-5284 का बैश कार्यान्वयन एक्सप्लॉइट शीर्षक: ossec 2.8 असुरक्षित अस्थायी फ़ाइल निर्माण भेद्यता विशेषाधिकार वृद्धि पायथन अच्छा है लेकिन हर समय काम नहीं करता एक्सप्लॉइट लेखक: mbadanoiu पायथन एक्सप्लॉइट लेखक: skynet-13 विक्रेता होमपेज: www.ossec.net/ सॉफ्टवेयर लिंक:...

CVE-2021-29447

CVE-2021-29447 PoC इस रिपॉज़िटरी में CVE-2021-29447 भेद्यता के लिए एक प्रूफ ऑफ कॉन्सेप्ट PoC शोषण exploit शामिल है, जो PHP 8 का उपयोग करने वाले WordPress 5.6 और 5.7 को प्रभावित करती है। यह शोषण दर्शाता है कि कैसे एक हमलावर, जिसके पास फ़ाइलें अपलोड करने की क्षमता है, मीडिया लाइब्रेरी में XML...

CVE-2025-0411-PoC

अधिक PoC देखें: https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X MinGW-w64 का उपयोग करके cpp संकलन करें x8664-w64-mingw32-g++ loader.cpp -o loader.exe -s -static संकलन के बाद exe को 7z से संपीड़ित करें और दो बार निष्पादित करें चूँकि इस भेद्यता के लिए उपयोगकर्ता की सहभागिता आवश्यक है, इसलिए...

CVE-2023-47129

CVE-2023-47129 - Statamic CMS versioni 4.33.0 - Esecuzione remota di codice Descrizione Nelle versioni 4.33.0 di Statamic CMS, dove il front-end ha un modulo con upload di file attivo, è possibile inviare file PHP creati per sembrare immagini, indipendentemente dalle regole di validazione MIME...

cve-2025-66723

CVE-2025-66723: inMusic Brands Engine DJ =3.0.0 से 4.3.4 तक स्थानीय और नेटवर्क फ़ाइलों को बाहरी पक्षों को उजागर करता है सारांश inMusic Brands सॉफ्टवेयर Engine DJ में एक एम्बेडेड HTTP सर्वर है जो मीडिया लाइब्रेरी फ़ाइलों को नेटवर्क पर कनेक्टेड क्लाइंट तक पहुँचाने के लिए होता है। मीडिया फ़ाइलों को...

cve-2025-24985

cve-2025-24985 احسب عدد عناقيد ملف VHD لاكتشاف تجاوز السعة. قطاعات الإقلاع المدعومة: MBR GPT الاستخدام root@kitploit: python -m cve202524985 -f الإعداد Nix root@kitploit: With direnv: direnv allow Or Without direnv: nix develop Peotry قيد العمل Docker قيد العمل قائمة المهام:...

EUVD-2026-66293

The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...

CVE-2026-18431

The Avada WordPress theme (≤ 7.16) combined with the Fusion Builder plugin (≤ 3.16) is vulnerable to unauthenticated Remote Code Execution via a chain of six authorization and input validation weaknesses enabling arbitrary file write. An attacker can create and execute arbitrary PHP files, leadin...

keepass_CVE-2023-24055_yara_rule

keepassCVE-2023-24055yararule Enthält eine einfache yara rule, um nach möglicherweise kompromittierten KeePass-Konfigurationsdateien zu suchen. Anleitung Verwenden Sie einen yara rule Scanner, wie yara, loki oder thor-lite, um Systeme mit dieser Regel zu scannen. Der Standardpfad für die lokale...

EUVD-2026-66287

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

CVE-2026-77757

CVE-2026-77757 affects the Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin (versions 8.5 through 8.9.2 ). The plugin fails to sanitize a user-supplied image reference before using it as the source of a file move via the REST v2 Listing Submission endpoint. A...

CVE-2026-77757 Directorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing Submission

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

CVE-2026-77693 Order Tip for WooCommerce < 1.6.0 - Shop Manager+ Arbitrary File Deletion via delete_exported_csv_file_ajax

The Order Tip for WooCommerce WordPress plugin before 1.6.0 does not check the capability of the user requesting a file deletion, nor does it restrict which path may be deleted, allowing users with the Shop Manager role and above to delete arbitrary files on the server, which could lead to the si...

CVE-2026-77693

The Order Tip for WooCommerce WordPress plugin (versions before 1.6.0 ) contains an arbitrary file deletion vulnerability in the delete_exported_csv_file_ajax function. The plugin fails to verify the requesting user's capability or restrict the file path, allowing authenticated users with the Sho...

EUVD-2026-66283

The Order Tip for WooCommerce WordPress plugin before 1.6.0 does not check the capability of the user requesting a file deletion, nor does it restrict which path may be deleted, allowing users with the Shop Manager role and above to delete arbitrary files on the server, which could lead to the si...

EUVD-2026-66281

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...