zyx0814

Products

ProductCVEsExploitedLatest
FilePress4–Oct 30, 2026
Pichome1–Feb 27, 2025

Exploited and recent CVEs

  • CVE-2026-119657 Medium 5.0 FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations 0.3%
  • CVE-2026-111619 Medium 6.5 FilePress through 3.0.1 SQL Injection via asc Parameter in filelist.php 0.4%
  • CVE-2026-90879 High 7.3 zyx0814 FilePress Publish search.php sql injection 0.4%
  • CVE-2026-8133 High 7.3 zyx0814 FilePress Shares Filelist API admin.php sql injection 0.3%
  • CVE-2025-1743 Medium 5.3 zyx0814 Pichome index.php path traversal 1.7%