Lucene search
+L

13 matches found

Nuclei
Nuclei
added 18 hours ago56 views

Rubedo CMS <=3.4.0 - Directory Traversal

Rubedo CMS through 3.4.0 contains a directory traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI. id: CVE-2018-16836 info: name:...

9.8CVSS8.8AI score0.61437EPSS
SaveExploits5References5
VulnCheck KEV
VulnCheck KEV
added 2025/06/07 12:0 a.m.5 views

VulnCheck KEV: CVE-2018-16836

Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI...

9.8CVSS6AI score0.61437EPSS
SaveExploits5References1
CVE
CVE
added 2021/12/20 10:52 p.m.33 views

CVE-2020-16836

CVE-2020-16836 entry is rejected/not used and does not represent an active vulnerability.

6.7AI score
SaveExploits0
Cvelist
Cvelist
added 2021/12/20 10:52 p.m.19 views

CVE-2020-16836

...

SaveExploits0
Circl
Circl
added 2018/09/16 2:19 p.m.14 views

CVE-2018-16836

creationtimestamp| type| source ---|---|--- 2018-09-16 14:19:21+00:00| seen| https://t.me/VulnerabilityNews/1595 2025-07-08 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75i7wuz2z...

9.8CVSS8.7AI score0.61437EPSS
SaveExploits5References2
zdt
zdt
added 2018/09/16 12:0 a.m.48 views

Rubedo CMS 3.4.0 - Directory Traversal Vulnerability

Exploit for linux platform in category web applications Exploit Title: Rubedo CMS 3.4.0 - Directory Traversal Google Dork: intext:rubedo.current.page.description Exploit Author: Marouene Boubakri Vendor Homepage: https://www.rubedo-project.org Version: through 3.4.0 Tested on: Linux CVE :...

0.61437EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2018/09/13 12:0 a.m.55 views

Rubedo CMS 3.4.0 Directory Traversal

Exploit Title: Rubedo CMS 3.4.0 - Directory Traversal Google Dork: intext:rubedo.current.page.description Date: 2018-09-11 Exploit Author: Marouene Boubakri Vendor Homepage: https://www.rubedo-project.org Version: through 3.4.0 Tested on: Linux CVE : CVE-2018-16836 PoC: Read /etc/passwd file from...

9.6AI score0.61437EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2018/09/12 12:0 a.m.49 views

Rubedo CMS 3.4.0 - Directory Traversal

Exploit Title: Rubedo CMS 3.4.0 - Directory Traversal Google Dork: intext:rubedo.current.page.description Date: 2018-09-11 Exploit Author: Marouene Boubakri Vendor Homepage: https://www.rubedo-project.org Version: through 3.4.0 Tested on: Linux CVE : CVE-2018-16836 PoC: Read /etc/passwd file from...

9.8CVSS8.4AI score0.61437EPSS
SaveExploits5
exploitpack
exploitpack
added 2018/09/12 12:0 a.m.48 views

Rubedo CMS 3.4.0 - Directory Traversal

Rubedo CMS 3.4.0 - Directory Traversal Exploit Title: Rubedo CMS 3.4.0 - Directory Traversal Google Dork: intext:rubedo.current.page.description Date: 2018-09-11 Exploit Author: Marouene Boubakri Vendor Homepage: https://www.rubedo-project.org Version: through 3.4.0 Tested on: Linux CVE :...

7.5CVSS9.7AI score0.61437EPSS
SaveExploits5
CVE
CVE
added 2018/09/11 4:0 p.m.99 views

CVE-2018-16836

Rubedo CMS up to version 3.4.0 is affected by a Directory Traversal in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside the service root (demonstrated via /theme/default/img/..//etc/passwd). Connected advisories confirm the issue and present the ...

9.8CVSS9.4AI score0.61437EPSS
SaveExploits5References2Affected Software1
CNVD
CNVD
added 2018/08/15 12:0 a.m.7 views

Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2018-16836)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the Windows system kernels. Microsoft Windows suffers from a local information disclosure vulnerability. A local attacker can exploit this issue to obtain...

4.7CVSS5.9AI score0.02637EPSS
SaveExploits0References1
CVE
CVE
added 2017/11/16 2:0 a.m.56 views

CVE-2017-16836

CVE-2017-16836 describes an unauthenticated stored cross-site scripting (XSS) in Arris TG1682G devices running Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT. The vulnerability is exploitable via the service parameter of actionHandler/ajax_managed_services.php, allowing an attacker to inject arb...

6.1CVSS5.9AI score0.01989EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 1976/01/01 12:0 a.m.33 views

CVE-2019-16836

CVE-2019-16836 entry is rejected and not used; it does not represent an active vulnerability.

7.3AI score
SaveExploits0
Rows per page
Query Builder