PT-2025-11324

Name of the Vulnerable Software and Affected Versions: WP01 plugin for WordPress versions up to, and including, 2.6.2 Description: The issue allows authenticated attackers with Subscriber-level access and above to download and read the contents of arbitrary files on the server, which can contain...

SUSE CVE-2018-1000802

Python Software Foundation Python CPython version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in shutil module makearchive function that can result in Denial of service, Information gain via injection of arbitrary files on...

The vulnerability of the `make_archive` function in the `shutil` module of the Python programming language interpreter (CPython) allows a malicious actor to trigger a service failure or gain unauthorized access to information.

The vulnerability of the makearchive function in the shutil module of the Python programming language interpreter CPython is related to errors in user input filtering. Exploiting this vulnerability could allow an attacker to cause service failures or gain unauthorized access to protected...

DEBIAN-CVE-2018-1000802

Python Software Foundation Python CPython version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in shutil module makearchive function that can result in Denial of service, Information gain via injection of arbitrary files on...