231 matches found
cve-2020-0688-webshell-upload-technique
Exchange Remote Code Execution cve-2020-0688 - RED TEAM MODE ON require: python3+ UNIVERSAL Python implementation for cve-2020-0688, utilizing ASPX webshell for custom command output This just a POC to facilitate vulnerability demostrations for security reasons. I disapprove every illegal actions...
ProxyLogon
ProxyLogon PoC originale: https://github.com/testanull Come usare: python proxylogon.py Esempio: python proxylogon.py primary [email protected] Se ha successo, verrai portato in una webshell. Usa exit o quit per uscire dalla webshell o ctrl+c Per impostazione predefinita, creerà un file...
CVE-2025-52691
CVE-2025-52691 SmarterMail: неаутентифицированная произвольная загрузка файлов RCE Обзор Критическая уязвимость неаутентифицированной произвольной загрузки файлов, позволяющая удалённо выполнять код...
CVE-2022-34919
CVE-2022-34919 Contensis 内容管理系统在 15.2.1.79 之前的版本中，其“Classic”界面存在一个缺陷，允许未经身份验证的用户上传并批准任意文件。通过上传 aspx 文件，可以在 Web 服务器的上下文中执行命令。 此漏洞于 2022 年 3 月发现，并于 2022 年 4 月 8 日由 Zengenti 在其发布中修复。 复现步骤 1: 初始文件上传通过对以下端点的 POST 请求执行：...
ASPX_WebShell_COFFLoader
ASPX Web Shell con COFF Loader Basato su CSCOFFLoader di TrustedSec Descrizione Questa web shell ASPX consente l'esecuzione di Beacon Object Files BOF su un server target utilizzando un client Python semi-interattivo. Sfrutta un'implementazione del loader COFF derivata da CSCOFFLoader di...
CVE-2019-13403
CVE-2019-13403 Bericht: Mai 2019 Fix: Mai 2019 Credit: B3Bo1d Beschreibung Temenos CWX Version 8.9 weist eine Schwachstelle durch fehlerhafte Zugriffskontrolle Broken Access Control im Modul /CWX/Employee/EmployeeEdit2.aspx auf, die zur Einsicht von Benutzerinformationen führt. PoC Vorher Nachher...
CVE-2025-57460
CVE-2025-57460 Beschr.: Eine Datei-Upload-Schwachstelle in machsol machpanel 8.0.32 ermöglicht es einem Angreifer eine Webshell zu erlangen. POC: Navigieren Sie zu https://controlpaneldomain/Client/SubmitTicket.aspx und laden Sie eine ASPx-Webshell hoch, reichen Sie dann das Ticket ein, öffnen Si...
CVE-2026-11412
A weakness has been identified in Jinher OA C6. The affected element is an unknown function of the file /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx. Executing a manipulation of the argument queryID can lead to sql injection. The attack may be performed from remote. The exploit has been made availab...
EUVD-2026-33974
Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code execution vulnerability through a deprecated .NET Remoting HTTP channel exposed on port 8989 that allows attackers to perform arbitrary file read and write operations by...
CVE-2025-70995
An issue in Aranda Service Desk Web Edition ASDK API 8.6 allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files. An authenticated user can upload a crafted web.config file by sending a crafted POST request to /ASDKAPI/api/v8.6/item/addfile,...
EUVD-2026-4776
An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Idusuario' and 'Idevaluacion’ in ‘/evaluacionhcaevalua.aspx’, could allow an attacker ...
CVE-2020-12470
MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template...
CVE-2025-61548
SQL Injection is present on the hfInventoryDistFormID parameter in the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 fixed in 19.69. Unsanitized user input is incorporated directly into SQL queries without proper parameterizati...
edu Business Solutions Print Shop Pro WebDesk 安全漏洞
edu Business Solutions Print Shop Pro WebDesk is a print order management system from edu Business Solutions, USA. A security vulnerability exists in edu Business Solutions Print Shop Pro WebDesk version 18.34, which originates from an incorrect operation of the parameter hfInventoryDistFormID in...
Exploit for CVE-2025-52691
CVE-2025-52691 SmarterMail Unauthenticated Arbitrary File U...
EUVD-2019-2649
Malware in sbrugna...
EUVD-2012-6600
Malware in sbrugna...
EUVD-2019-19201
Malware in sbrugna...