Lucene search
+L

132 matches found

Kitploit
Kitploit
•added 2026/10/05 2:48 a.m.•14 views

cve-2019-0604-SP2010-netv3.5

cve-2019-0604-SP2010-netv3.5 Recently, I came across a Sharepoint 2010 SP2 and all the Proof of Concept that I tested didn't work until I realized that the server was on .net 3.5 which require a different library. Here is the .dll for .net 3.5. The code came from...

9.8CVSS7.7AI score0.99913EPSS
SaveExploits30References1
Kitploit
Kitploit
•added 2026/10/04 1:42 p.m.•11 views

CVE-2019-0604

1. Analysis of k8gege's cve-2019-0604-exp.py k8gege's script https://github.com/k8gege/CVE-2019-0604 Honestly, k8gege's Python script is a bit fancy, with a large number of hexadecimal strings split into payload1, 2, 3. Devious. The Python script sends a remote POST payload, which after...

9.8CVSS7.7AI score0.99913EPSS
SaveExploits30References4
Kitploit
Kitploit
•added 2026/10/04 12:43 p.m.•15 views

weaponized-0604

武器化された CVE-2019-0604 CVE-2019-0604 を最大限に活用する自動エクスプロイトツール。 要件 requirements.txt ファイルには、このツールが使用するすべての Python ライブラリを記載する必要があります。これらは以下を使用してインストールされます。 $ pip install -r requirements.txt 手動ブラインドエクスプロイト(資格情報あり/なし) $ python exploit.py -u -c whoami --ntlm -U : アップロード機能 任意のクールなもの(webshell、recon...

9.8CVSS8AI score0.99913EPSS
SaveExploits30References1
Kitploit
Kitploit
•added 2026/10/04 5:04 a.m.•12 views

CVE-2019-0604

CVE-2019-0604 cve-2019-0604 SharePoint RCE エクスプロイト ブログ: https://www.cnblogs.com/k8gege/p/11093992.html ウィキ: https://github.com/k8gege/K8CScan/wiki/%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8-CVE-2019-0604-SharePoint-GetShell-Exploit...

9.8CVSS7.8AI score0.99913EPSS
SaveExploits30References1
Kitploit
Kitploit
•added 2026/10/03 7:11 a.m.•14 views

CVE-2019-0604

このリポジトリには README がありません。...

9.8CVSS7.5AI score0.99913EPSS
SaveExploits30
Kitploit
Kitploit
•added 2026/09/29 4:09 p.m.•14 views

CVE-2019-0604_sharepoint_CVE

CVE-2019-0604 CVE-2019-0604 From https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

9.8CVSS7.7AI score0.99913EPSS
SaveExploits30
RedhatCVE
RedhatCVE
•added 2026/01/07 9:40 a.m.•12 views

CVE-1999-0604

An incorrect configuration of the WebStore 1.0 shopping cart CGI program "webstore.cgi" could disclose private information...

5CVSS7AI score0.01109EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/01/06 6:18 a.m.•14 views

WordPress FastDup plugin <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter vulnerability

Authenticated Contributor+ Path Traversal via 'dirpath' REST Parameter vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin FastDup versions = 2.7...

6.5CVSS6.9AI score0.00377EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/01/02 6:30 p.m.•10 views

EUVD-2026-0604

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2021-0604

Malware in sbrugna...

7.6CVSS8AI score0.0256EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/05/23 9:32 a.m.•14 views

CVE-2024-0604

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.8CVSS5.8AI score0.00621EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:56 a.m.•11 views

CVE-2023-0604

The WP Food Manager WordPress plugin before 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.4CVSS5AI score0.00503EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:00 p.m.•10 views

CVE-2021-0604

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

5.5CVSS6.2AI score0.00142EPSS
SaveExploits0References1
Circl
Circl
•added 2025/01/22 3:17 p.m.•16 views

CVE-2025-0604

creationtimestamp| type| source ---|---|--- 2025-01-22 15:17:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdnzlrxio27 2025-03-11 00:47:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7075 2025-03-11 04:41:13+00:00| seen|...

5.4CVSS5.4AI score0.0059EPSS
SaveExploits0References2
Chainguard
Chainguard
•added 2025/01/22 3:15 p.m.•23 views

CVE-2025-0604 vulnerabilities

Vulnerabilities for packages: keycloak-fips...

5.4CVSS5.7AI score0.0059EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/07/24 12:00 a.m.•35 views

Photon OS 3.0: Docker PHSA-2023-3.0-0604

An update of the docker package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0604. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.8CVSS6.4AI score0.01069EPSS
SaveExploits3References8
Tenable Nessus
Tenable Nessus
•added 2024/03/18 12:00 a.m.•25 views

Cisco Unified IP Phone 9900 Series Arbitrary File Upload (CVE-2015-0604)

The web framework on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424. This plugin only works with Tenable.ot. Please visit...

5CVSS5.5AI score0.01362EPSS
SaveExploits0References6
Circl
Circl
•added 2024/03/06 4:16 p.m.•17 views

CVE-2024-0604

creationtimestamp| type| source ---|---|--- 2024-03-06 16:16:30+00:00| seen| https://t.me/ctinow/201479 2025-02-13 17:09:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4266 2025-02-14 10:08:10+00:00| seen| Telegram/Ohrguig6K9WU-maJvfHBCqJL34ZwO2yCBoEcWJdaog-Kcj3...

4.8CVSS6.2AI score0.00621EPSS
SaveExploits1References2
NVD
NVD
•added 2024/02/29 1:43 a.m.•30 views

CVE-2024-0604

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.8CVSS4.3AI score0.00621EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/02/20 6:56 p.m.•10 views

CVE-2024-0604 Best WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settings

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS6.7AI score0.00621EPSS
SaveExploits1References3
Rows per page
Query Builder