5089 matches found
Monitorr 1.7.6m - Unauthenticated Remote Code Execution
Monitorr 1.7.6m is susceptible to a remote code execution vulnerability. Improper input validation and lack of authorization leads to arbitrary file uploads in the web application. An unauthorized attacker with web access to could upload and execute a specially crafted file, leading to remote cod...
Oturia WordPress Smart Google Code Inserter <3.5 - Authentication Bypass
Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code via the sgcgoogleanalytic parameter that runs on all pages served by WordPress. The saveGoogleCode function in smartgooglecode.php does not check if the...
PhpColl 2.5.1 Arbitrary File Upload
PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/ via clients/editclient.php. id: CVE-2017-6090 info: name: PhpColl 2.5.1 Arbitrary File Uplo...
Zabbix <=4.4 - Authentication Bypass
Zabbix through 4.4 is susceptible to an authentication bypass vulnerability via zabbix.php?action=dashboard.view&dashboardid=1. An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password i.e., anonymously...
Comodo Unified Threat Management Web Console - Remote Code Execution
Comodo Firewall & Central Manager UTM All Release before 2.7.0 & 1.5.0 are susceptible to a web shell based remote code execution vulnerability. id: CVE-2018-17431 info: name: Comodo Unified Threat Management Web Console - Remote Code Execution author: dwisiswant0 severity: critical description:...
Fuel CMS 1.4.7 - SQL Injection
FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. id: CVE-2020-17463 info: name: Fuel CMS 1.4.7 - SQL Injection author: Thirukrishnan severity: critical description: | FUEL CMS 1.4.7 allows SQL Injection via the col parameter to...
Webmin <= 1.920 - Unauthenticated Remote Command Execution
Webmin =1.920. is vulnerable to an unauthenticated remote command execution via the parameter 'old' in passwordchange.cgi. id: CVE-2019-15107 info: name: Webmin = 1.920 - Unauthenticated Remote Command Execution author: bp0lr severity: critical description: Webmin =1.920. is vulnerable to an...
Netsweeper - Authentication Bypass
The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL. id: CVE-2014-9618 info: name: Netsweeper - Authentication...
BOA Web Server 0.94.14 - Arbitrary File Access
BOA Web Server 0.94.14 is susceptible to arbitrary file access. The server allows the injection of "../.." using the FILECAMERA variable sent by GET to read files with root privileges and without using access credentials. id: CVE-2017-9833 info: name: BOA Web Server 0.94.14 - Arbitrary File Acces...
MantisBT <=2.30 - Arbitrary Password Reset/Admin Access
MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php. id: CVE-2017-7615 THIS TEMPLATE IS ONLY FOR DETECTING To carry out further attacks, please see reference2 below. This template works by guessing user ID. MantisBT...
WordPress Perfect Survey <1.5.2 - SQL Injection
Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the questionid GET parameter before using it in a SQL statement in the getquestion AJAX action, allowing unauthenticated users to perform SQL injection. id: CVE-2021-24762 info: name: WordPress Perfect Survey 1.5.2 - SQL...
PT-2026-83751
Name of the Vulnerable Software and Affected Versions ToolJet versions prior to 3.16.208 Description An issue exists where the software fails to validate if authenticated users belong to the organization specified in the organizationId path parameter of tooljet-db endpoints. This allows any user...
CVE-2002-1614
CVE-2002-1614 此利用仅用于教育目的或您合法的渗透测试过程。 来源：https://www.exploit-db.com/exploits/281 编译 gcc exploit.c 输出文件：a.out 用法 执行权限：chmod +x a.out 执行：./a.out...
rcs-db
Este repositorio no tiene un README...
CVE-2016-0792
Jenkins 序列化漏洞利用 - CVE-2016-0792 https://www.exploit-db.com/exploits/42394/ 更多信息请见 1. Contrast Security 2. Pentester Lab 要求 1. Python 3.6.x 2. requests 库是此利用程序工作所必需的 sudo pip install requests 用法 旧方法 新方法 root@kitploit: python3 exp.py -u -c root@kitploit: usage: exploit.py -h -u U -c C CVE-2016-0792...
CVE-2021-42325-
CVE-2021-42325- CVE-2021-42325 POC Enlace: https://www.exploit-db.com/exploits/50502...
Joomla-CVE-2015-8562-PHP-POC
Joomla-CVE-2015-8562-PHP-POC Joomla CVE-2015-8562 漏洞的概念验证（PoC） 简介 此 PoC 几乎完全复制了 Gary 的 Python 实现，该实现托管在 exploit-db 上。 使用方法 安装过程非常简单： root@kitploit: git clone https://github.com/RobinHoutevelts/Joomla-CVE-2015-8562-PHP-POC.git cd Joomla-CVE-2015-8562-PHP-POC composer install Composer 安装完所有依赖后，你需要修...
Oracle Forms & Reports RCE (CVE-2012-3152 & CVE-2012-3153)
An unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. id: CVE-2012-3153 info: name: Oracle Forms &...