PT-2026-29330 · Undefined · Undefined

Secsys-Fdu · Publicado 2026-03-31 · Atualizado 2026-03-31 · CVE-2026-30285

NVD

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-30285

Produtos afetados

Undefined

Referências · 4

• 🔥 https://github.com/Secsys-FDU/AF_CVEs/issues/15 · Exploit
• https://secsys.fudan.edu.cn · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-30285 · Nota de Segurança
• https://zora.co · Nota