CVE-2022-0236

CVE-2022-0236 Le plugin WordPress WP Import Export est vulnérable à une divulgation non authentifiée de données sensibles en raison d'un manque de vérification des capacités sur la fonction de téléchargement wpieprocessfiledownload trouvée dans le fichier /includes/classes/class-wpie-general.php...

CVE-2025-9215

إضافة StoreEngine القوية لتجارة إلكترونية ووردبريس للمدفوعات والعضويات والعمولات والمبيعات والمزيد = 1.4.0 - تنزيل ملفات تعسفي للمستخدمين الموثقين مشترك+ تحتوي إضافة StoreEngine على ثغرة في ميزة استيراد/تصدير CSV تسمح لأي مستخدم موثق مشترك، كاتب، محرر، إلخ بتنزيل ملفات تعسفية من الخادم، بما في ذل...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

pecli

PEcli أداة لتحليل ملفات PE في بايثون 3. الميزات الحالية: عرض معلومات حول الملف الواردات، الصادرات، الموارد البحث عن معلومات مثيرة للاهتمام في الملف الموارد غير الطبيعية، peid... تفريغ الأقسام أو الموارد التحقق من الحجم البحث عن سلسلة نصية في الملف التثبيت يمكنك تثبيته من pypi : pip install pecli ...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

EUVD-2026-60441

ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal...

CVE-2024-7514

CVE-2024-7514 WordPress Comments Import & Export = 2.3.7 - Аутентифицированное Author+ чтение произвольных файлов через обход каталога Описание Плагин WordPress Comments Import & Export для WordPress уязвим к чтению произвольных файлов из-за недостаточной проверки пути к файлу во время процесса...

CVE-2024-54262

CVE-2024-54262 Эксплойт CVE-2024-54262: Произвольная загрузка файлов в Import Export для WooCommerce Обзор Этот скрипт эксплуатирует уязвимость в плагине WordPress "Import Export for WooCommerce". Уязвимость позволяет неавторизованным пользователям загружать произвольные файлы, что приводит к...

CVE-2026-17566

CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC PoC d'exécution de code à distance pour l'outil Import/Export Data de pgAdmin 4. En exploitant la divergence de sémantique d'échappement par antislash entre le vérificateur de parenthèses isqueryparensbalanced et psql, injectez \copy ... TO...

activemq-cve-lab

ActiveMQ Message Broker Vue d'ensemble Application de courtier de messages ActiveMQ avec fonctionnalités d'import/export de messages. Version : 5.11.1 Fonctionnalités Gestion des files de messages Statistiques et surveillance des files Import/export de fichiers de messages Statut du courtier en...

CVE-2026-51727

Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to retrieve administrative import and export endpoint information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-76547

CVE-2026-76547 affects the User Profile Builder WordPress plugin before version 4.0.1 . The root cause is unvalidated deserialization when importing a configuration file, enabling PHP Object Injection by high-privilege users (e.g., administrators). Two significant mitigating factors reduce practi...

CVE-2026-76547 Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export

The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when importing a configuration file, allowing high privilege users such as administrators to conduct PHP Object Injection. The affected feature is a free add-on which is disabled by defaul...

CVE-2026-81845 arben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversal

A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function importsession/exportsession of the file mcpsequentialthinking/server.py of the component Import Session/Export Session. Such manipulation of the argument filepath leads to path traversal. It ...

CVE-2026-63667

ApostropheCMS versions before 3.6.2 are vulnerable to arbitrary file read via path traversal in the import-export module. The file packages/import-export/lib/formats/gzip.js builds an attachment source path using attacker-controlled _id, name, and extension fields from aposAttachments.json withou...

CVE-2026-63667 ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal

ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...

PT-2026-76770

Name of the Vulnerable Software and Affected Versions ApostropheCMS versions prior to 3.6.2 Description The import-export module in packages/import-export/lib/formats/gzip.js fails to properly validate that the resolved attachment source path remains within the extracted attachments directory. An...

CVE-2025-15673

The Import and export users and customers WordPress plugin before 2.4.3 does not restrict the path of a file it reads and displays during a CSV import, allowing high-privileged users to read arbitrary files on the server...

CVE-2025-15673

The CVE-2025-15673 entry affects the WordPress Import and Export Users and Customers plugin up to version 2.4.3. The root cause is an insufficiently restricted file path when reading and displaying files during CSV imports, enabling a high-privilege user to read arbitrary server files. This impac...

CVE-2026-17566

A flaw was found in pgAdmin 4, a management tool for PostgreSQL databases. The Import/Export Data feature incorrectly processes certain user-provided SQL queries, specifically regarding how backslash characters are interpreted. This vulnerability allows an authenticated remote attacker, with...