CVE-2018-16763

Exploit CVE 2018-16763 Introducción PreAuth-RCE en FUEL CMS 1.4.1 Demo Referencias: https://nvd.nist.gov/vuln/detail/CVE-2018-16763 https://www.exploit-db.com/exploits/47138...

CVE-2018-16763

CVE-2018-16763 Exploit Title: fuel CMS 1.4.1 - Remote Code Execution Python3 script - 💻 This script was developed by h3x0v3rl0rd...

CVE-2018-16763-exploit

CVE-2018-16763-exploit Esta es una versión actualizada del CVE-2018-16763 para fuelCMS 1.4.1 El script se basa en el de https://www.exploit-db.com/exploits/47138 El script está actualizado para su uso con Python 3...

CVE-2018-16763

CVE-2018-16763 Fuel CMS 1.4.1 - Ejecución Remota de Código - Python 3.x Script original : Exploit-DB...

CVE-2004-2271

CVE-2004-2271 Minishare 1.4.1 Desbordamiento de búfer remoto...

CVE-2018-16763-FuelCMS-1.4.1-RCE

CVE-2018-16763 - RCE en FuelCMS = 1.4.1 Exploit para desencadenar RCE para CVE-2018-16763 en FuelCMS = 1.4.1 y shell interactiva. Características Automáticamente sube una webshell PHP en FuelCMS usando CVE-2018-16763. Ejecuta comandos del sistema a través de una API con ?action=exec. Descarga...

CVE-2018-16763-FuelCMS-1.4.1-RCE

CVE-2018-16763-FuelCMS-1.4.1-RCE 此漏洞利用的原始版本位于：https://www.exploit-db.com/exploits/50477 我对其进行了修改，使其能在TryHackMe的Vulnerability Capstone中工作。...

Nacos <1.4.1 - Authentication Bypass

Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint i...

CVE-2018-16763-Exploit-Python3

CVE-2018-16763 FuelCMS 1.4.1 Remote Code Execution Vulnerability This is a port to Python 3 of the vulnerability at https://www.exploit-db.com/exploits/47138, created by 0xd0ff9. To run de exploit, just modify the url variable in the code with the target url you want to attack, and add the proxie...

RuoYI-4.2-Shiro-721-Docker-PoC

RuoYI 4.2 Shiro 1.4.1 Shiro-721漏洞复现环境 用于在RuoYI上复现Shiro-721漏洞CVE-2019-12422。 提示：本服务存在严重漏洞 ，仅用于漏洞复现用途，请勿用于生产环境。 克隆 为方便安装指定版本maven和jdk，仓库使用了git lfs管理大文件，因此需git lfs clone。 不清楚这样是否违反jdk的分发原则，若有违反我将及时删除。 启动 docker-compose up -d 版本 JDK 1.8 8u65 MySQL 5.7 Maven 3.0 Base Ubuntu:22.04 配置参数 apt-get: USTC...

CVE-2020-13768

🐞 CVE-2020-13768: MiniShare 1.4.1 - 基于栈的缓冲区溢出 MiniShare 1.4.1 中存在基于栈的缓冲区溢出，通过单个 HTTP PUT 请求即可触发。 📑 目录 此仓库存在的原因 此漏洞的有趣之处 背景与受影响软件 关于漏洞 触发崩溃 利用方法 🎓 此仓库存在的原因 此仓库是我在教授内存损坏利用时所使用的素材的一部分（除了日常工作，我还在多个网络安全课程中任教，帮助培养下一代逆向工程师）。 CVE-2020-13768 是我用来展示简单的面向网络的服务器如何通过标准协议方法暴露经典栈缓冲区溢出的案例。易受攻击的端点无需认证，溢出直接覆盖...

CVE-2026-78292

Unauthenticated PHP Object Injection in Hash Form = 1.4.1 versions...

EUVD-2026-66946

Unauthenticated PHP Object Injection in Hash Form = 1.4.1 versions...

WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Hash Form versions = 1.4.1...

Astra Linux – Vulnerability in node-loader-utils

A prototype pollution vulnerability exists in the parseQuery function in parseQuery.js, within the webpack-loader-utils module. This issue affects all versions prior to 1.4.1 and 2.0.3...

CVE-2026-70436

Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check 1.4.0 and earlier or performs an improper permission check 1.4.1 when providing access to externally-managed workspaces through the workspace browser, allowing attackers with Overall/Read permission to...

CLSA-2026-1780966318 TuxCare security update for jspdf (6 CVEs)

TuxCare rebuilt jspdf to address 6 CVEs. Fixed in 1.4.1-tuxcare.1...

CLSA-2026-1772496676 TuxCare security update for d3-color (1 CVE)

TuxCare rebuilt d3-color to address 1 CVE. Fixed in 1.4.1-tuxcare.1...

NPM: Valibot: record() issue paths can make flatten() throw for inherited Object property names

NPM: Valibot: record issue paths can make flatten throw for inherited Object property names vulnerability discovered by ? in WordPress Npm valibot versions = 1.4.1...

CVE-2026-46410

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may leak some sensitive info, such as source and path. Versions 1.3.2-stable and 1.4.1-beta fix the issue. No known workarounds are available...