CVE-2018-16763-FuelCMS-1.4.1-RCE

CVE-2018-16763 - FuelCMS = 1.4.1 RCE Exploit to trigger RCE for CVE-2018-16763 on FuelCMS = 1.4.1 and interactive shell. Features Automatically uploads a php webshell API in FuelCMS using CVE-2018-16763. Execute system commands via an API with ?action=exec. Download files from the remote system t...

CVE-2018-16763-Exploit-Python3

CVE-2018-16763 FuelCMS 1.4.1 원격 코드 실행 취약점 이것은 0xd0ff9가 만든 https://www.exploit-db.com/exploits/47138 취약점을 Python 3로 포팅한 것입니다. 익스플로잇을 실행하려면 코드의 url 변수를 공격하려는 대상 URL로 수정하고, 프록시를 사용 중이라면 proxies 목록에 해당 프록시를 추가하세요. 이 익스플로잇은 어떤 종류의 인증도 요구하지 않습니다...

CVE-2020-13768

🐞 CVE-2020-13768: MiniShare 1.4.1 - Overflow del buffer basato su stack Overflow del buffer basato su stack in MiniShare 1.4.1 raggiungibile tramite una singola richiesta HTTP PUT. 📑 Indice Perché esiste questo repository Perché questa vulnerabilità è interessante Contesto e software interessato...

CVE-2018-16763

CVE 2018-16763 Exploit Introduzione PreAuth-RCE su FUEL CMS 1.4.1 Demo Riferimenti: https://nvd.nist.gov/vuln/detail/CVE-2018-16763 https://www.exploit-db.com/exploits/47138...

CVE-2004-2271

CVE-2004-2271 Minishare 1.4.1 Buffer overflow remoto...

CVE-2018-16763-FuelCMS-1.4.1-RCE

CVE-2018-16763-FuelCMS-1.4.1-RCE Оригинальная версия этого эксплойта находится здесь: https://www.exploit-db.com/exploits/50477 Я изменил его, чтобы он работал на Vulnerability Capstone от TryHackMe...

CVE-2018-16763

CVE-2018-16763 Título do Exploit: fuel CMS 1.4.1 - Execução Remota de Código Script Python3 - 💻 Este script foi desenvolvido por h3x0v3rl0rd...

RuoYI-4.2-Shiro-721-Docker-PoC

RuoYI 4.2 Shiro 1.4.1 Ambiente di riproduzione della vulnerabilità Shiro-721 Utilizzato per riprodurre la vulnerabilità Shiro-721 CVE-2019-12422 su RuoYI. Attenzione: questo servizio presenta gravi vulnerabilità. Utilizzare solo per scopi di riproduzione delle vulnerabilità, non in ambienti di...

CVE-2018-16763-exploit

CVE-2018-16763-exploit Questa è una versione aggiornata del CVE-2018-16763 per fuelCMS 1.4.1 Lo script si basa su quello di https://www.exploit-db.com/exploits/47138 Lo script è aggiornato per l'uso con Python 3...

Nacos <1.4.1 - Authentication Bypass

Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint i...

CVE-2018-16763

CVE-2018-16763 Fuel CMS 1.4.1 - Esecuzione di codice remoto - Python 3.x Script originale: Exploit-DB...

CVE-2026-70436

Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check 1.4.0 and earlier or performs an improper permission check 1.4.1 when providing access to externally-managed workspaces through the workspace browser, allowing attackers with Overall/Read permission to...

CLSA-2026-1780966318 TuxCare security update for jspdf (8 CVEs)

TuxCare rebuilt jspdf to address 8 CVEs. Fixed in 1.4.1-tuxcare.1...

CLSA-2026-1772496676 TuxCare security update for d3-color (8 CVEs)

TuxCare rebuilt d3-color to address 8 CVEs. Fixed in 1.4.1-tuxcare.1...

NPM: Valibot: record() issue paths can make flatten() throw for inherited Object property names

NPM: Valibot: record issue paths can make flatten throw for inherited Object property names vulnerability discovered by ? in WordPress Npm valibot versions = 1.4.1...

CVE-2026-46410

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may leak some sensitive info, such as source and path. Versions 1.3.2-stable and 1.4.1-beta fix the issue. No known workarounds are available...

CVE-2026-46410 FileBrowser Quantum: unauthenticated user share share info

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may leak some sensitive info, such as source and path. Versions 1.3.2-stable and 1.4.1-beta fix the issue. No known workarounds are available...

CVE-2026-16222

A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1. This issue affects some unknown processing of the file backend/crm/src/main/java/cn/cordys/crm/integration/sso/service/TokenService.java of the component Third Party Endpoint. Performing a manipulation of the argument mkAddress result...

CVE-2026-16222 1Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgery

A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1. This issue affects some unknown processing of the file backend/crm/src/main/java/cn/cordys/crm/integration/sso/service/TokenService.java of the component Third Party Endpoint. Performing a manipulation of the argument mkAddress result...

GHSA-52MM-H59V-F3C7 earmark: Stored XSS via unescaped HTML attribute values

Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':makeatt1/2 in lib/earmark/transform.ex splices attribute values verbatim between two literal " bytes: ...