CVE-2025-34085

📂 Simple File List – 未认证的远程代码执行漏洞利用 CVE-2025-34085 ⚠️ 漏洞利用代码作者：Mrj Haxcore 一个针对 WordPress Simple File List 插件 = 4.2.3 的完整 Python 漏洞利用脚本，该插件因不安全的文件上传和重命名逻辑而存在未认证的远程代码执行 RCE 漏洞。 💣 漏洞摘要 插件 ：Simple File List simple-file-list 版本 ：= 4.2.3 CVE ：CVE-2025-34085 影响 ：未认证用户可上传伪装成 .png 的 PHP 文件，随后将其重命名为 .php...

CVE-2025-23968

AI Bud – AI 内容生成器、AI 聊天机器人、ChatGPT、Gemini、GPT-4o AI Bud 插件暴露了一个 REST API 端点 /wp-json/ai-buddy/v1/wp/attachments，该端点允许将文件上传到 WordPress 媒体库。该端点的文件逻辑包含文件重命名功能，该功能在文件类型验证之后触发，并允许攻击者将上传的文件重命名为任意扩展名（包括 .php），从而使管理员及以上权限的用户能够上传任意文件，并有可能在服务器上执行代码。 TL;DR 漏洞利用 提供了一个 POC cve-2025-23968.py，用于演示管理员上传名为...

CVE-2026-53795 rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest

rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options. The rename-confinement logic is bypassed when these options resolve to paths outside t...

CVE-2026-35025

ProFTPD versions affected: 1.3.9b and 1.3.10rc2. Issue: an access control bypass in the RNFR path handling allows authenticated FTP users to bypass Directory ACL restrictions by prefixing paths with /proc/self/root. Root cause: unresolved symlink components in dir_canonical_path() cause dir_check...

RUSTSEC-2026-0188 WASI hard links and renames bypass wasmtime-wasi's FilePerms for destination

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4ch3-9j33-3pmj For more information see the GitHub-hosted security advisory...

CVE-2026-45264

Nextcloud shows an ACL-based permission bypass affecting Team Folders. A user with READ and CREATE (but not UPDATE) permission could rename files within a Team Folder in multiple branches: 17.0.0–17.0.14, 18.0.0–18.1.11, 19.0.0–19.1.15, 20.0.0–20.1.10, and 21.0.0–21.0.3. The issue has been patche...

CVE-2026-45264 Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames

Nextcloud is an open source content collaboration platform. From versions 17.0.0 to before 17.0.15, 18.0.0 to before 18.1.12, 19.0.0 to before 19.1.16, 20.0.0 to before 20.1.11, and 21.0.0 to before 21.0.4, a user with READ and CREATE permission, but no UPDATE permission for a team folder can...

CVE-2025-62001

Summary: CVE-2025-62001 affects BullWall Ransomware Containment. A flaw in configurable/exclusion handling could let an attacker with file write permissions bypass monitoring by renaming directories (e.g., $RECYCLE.BIN/$recycle.bin). Affected versions (per sources): 4.6.0.0, 4.6.0.6, 4.6.0.7, 4.6...

EUVD-2019-7908

Malware in sbrugna...

CVE-2019-17575

A file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This can be exploited by an authenticated user with admin privileges to rename a media filename and extension. For example: place PHP code in a .jpg file, and then change the file's base name to filename.p...