Stored Cross Site Scripting (XSS)

Winter CMS is vulnerable to Stored Cross Site Scripting XSS. The vulnerability is due to improper sanitization within the rename functionality of files after uploads to the Media Manager. This issue can be exploited by an attacker with the media.managemedia permission to upload a file and later...

PT-2023-23604 · Unknown · Media File Renamer

Name of the Vulnerable Software and Affected Versions: Rename Media Files versions n/a through 1.0.1 Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability. This vulnerability affects the Rename Media Files software. Recommendations: For...

WordPress Plugin Rename Media Files Code Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

CVE-2023-32095: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Milan Dinić Rename Media Files.This issue affects Rename Media Files: from n/a through 1.0.1...

PT-2023-32849 · Unknown · Codelyfe Stupid Simple Cms

Name of the Vulnerable Software and Affected Versions: codelyfe Stupid Simple CMS versions up to 1.2.4 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /file-manager/rename.php. The manipulation of the newName argument leads to path...

CVE-2023-44991

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Media File Renamer: Rename Files Manual, Auto & AI.This issue affects Media File Renamer: Rename Files Manual, Auto & AI: from n/a through 5.6.9...

PT-2023-29335

Name of the Vulnerable Software and Affected Versions Media File Renamer: Rename Files Manual, Auto & AI versions through 5.6.9 Description The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made accessible to...

CVE-2023-44991: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Media File Renamer: Rename Files Manual, Auto & AI.This issue affects Media File Renamer: Rename Files Manual, Auto & AI: from n/a through 5.6.9...

PT-2023-8696

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs rename function of the f2fs component. The flaw occurs during cross-directory renames when the system fails to call f2fs set link to update the .. link to the...

PT-2024-14635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ocfs2 file system in the Linux kernel. The VFS does not lock a moved directory if its parent does not change, which can lead to file system corruption if the...

PT-2024-14636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the reiserfs file system in the Linux kernel. The VFS does not lock a moved directory if its parent does not change. To address this, the reiserfs rename code has...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.325.5.el8 - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext Krister Johansen Orabug: 35905508 - char: misc: Increase the maximum number of dynamic misc devices to 1048448 D Scott Phillips Orabug: 35905508 - perf/arm-cmn: Fix invalid pointer when access...

CVE-2023-46020

Cross Site Scripting XSS in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters...

PT-2023-29802

Name of the Vulnerable Software and Affected Versions Code-Projects Blood Bank version 1.0 Description The issue allows attackers to run arbitrary code via the rename, remail, rphone, and rcity parameters in the "updateprofile.php" file. This can lead to the execution of malicious scripts...

CVE-2023-46020: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters...

Code-Projects Blood Bank Cross-Site Scripting Vulnerability

Code-Projects Blood Bank is a blood bank system from the Code-Projects project. A security vulnerability exists in Code-Projects Blood Bank version 1.0, which stems from a stored cross-site scripting XSS vulnerability in the rename and other parameters of the file updateprofile.php...

Exploit for Cross-site Scripting in Code-Projects Blood_Bank

CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-...

kernel: ext4: Fix deadlock during directory rename

REJECTED CVE In the Linux kernel, the following vulnerability has been resolved: ext4: Fix deadlock during directory rename As lockdep properly warns, we should not be locking irwsem while having transactions started as the proper lock ordering used by all directory handling operations is irwsem ...

PT-2025-18893 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A deadlock issue during directory rename operations has been identified. The problem arises from incorrect lock ordering, where i rwsem is locked while transactions are started, contra...

CVE-2023-45868

The Learning Module in ILIAS 7.25 2023-09-12 release allows an attacker with basic user privileges to achieve a high-impact Directory Traversal attack on confidentiality and availability. By exploiting this network-based vulnerability, the attacker can move specified directories, normally outside...