42 matches found
Exploit for Improper Access Control in Joomla Joomla\!
Full-Lifecycle CMS Penetration Testing Joomla 4.2.5 📌 Pr...
Exploit for Improper Access Control in Joomla Joomla\!
PoCs This repo contains proof of concept exploits for vulnera...
Exploit for Improper Access Control in Joomla Joomla\!
PoCs This repo contains proof of concept exploits for vulnera...
CVE-2024-23752
GenerateSDFPipeline in syntheticdataframe in PandasAI aka pandas-ai through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language specification of this Python code. NOTE:...
CVE-2025-23752 WordPress CGD Arrange Terms plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Clifton Griffin CGD Arrange Terms shopp-arrange allows Reflected XSS.This issue affects CGD Arrange Terms: from n/a through = 1.1.3...
CVE-2025-23752 WordPress CGD Arrange Terms plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Clifton Griffin CGD Arrange Terms shopp-arrange allows Reflected XSS.This issue affects CGD Arrange Terms: from n/a through = 1.1.3...
CVE-2025-23752
CVE-2025-23752 is a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin CGD Arrange Terms (NotFound CGD Arrange Terms). Affected versions are 1.1.3 and earlier (listed as from n/a through 1.1.3). The root cause is Improper Neutralization of Input During Web Page Generation,...
Exploit for Command Injection in Ui Er-X_Firmware
Joomla! CVE-2023-23752 - Unauthenticated Information Disclosur...
Joomla 4.2.8 Information Disclosure Exploit
!/bin/bash Exploit Title: Joomla! \n" exit 1 else echo -e "\n Joomla! out.tmp echo -e "\ni Database info:\n" echo -e "+ DB Type: $sed -E 's/."dbtype":"^"+"./\1/' out.tmp" echo -e "+ DB Host: $sed -E 's/."host":"^"+"./\1/' out.tmp" echo -e "\e92m+ DB User: $sed -E 's/."user":"^"+"./\1/' out.tmp\e0...
Joomla 4.2.8 Information Disclosure
!/bin/bash Exploit Title: Joomla! \n" exit 1 else echo -e "\n Joomla! out.tmp echo -e "\ni Database info:\n" echo -e "+ DB Type: $sed -E 's/."dbtype":"^"+"./\1/' out.tmp" echo -e "+ DB Host: $sed -E 's/."host":"^"+"./\1/' out.tmp" echo -e "\e92m+ DB User: $sed -E 's/."user":"^"+"./\1/' out.tmp\e0...
Exploit for Improper Access Control in Joomla Joomla\!
CVE-2023-23752 - Joomla-v4.2.8 Unauthenticated information...
Exploit for Improper Access Control in Joomla Joomla\!
CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated informa...
Exploit for Improper Access Control in Joomla Joomla\!
Installation sh git clone h...
Exploit for Improper Access Control in Joomla Joomla\!
CVE-2023-23752 About - This exploit is Authentication Byp...
Exploit for Improper Access Control in Joomla Joomla\!
Joomla! options Arguments - url: Root URL base...
exposeq (>=4.1.3 <=4.6.1), squadds (>=0.0.0 <=0.0.3) potentially affected by CVE-2024-23752 via pandasai (>=1.3.3 <=1.5.11)
pandasai PYPI version =1.3.3, =4.1.3, =0.0.0, =0.0.3 Source cves: CVE-2024-23752 Source advisory: OSV:GHSA-5G73-69P4-7GVX...
CVE-2024-23752
creationtimestamp| type| source ---|---|--- 2024-01-22 02:21:35+00:00| seen| https://t.me/ctinow/170954 2024-02-16 08:16:33+00:00| seen| https://t.me/ctinow/186167...
CVE-2024-23752
GenerateSDFPipeline in syntheticdataframe in PandasAI aka pandas-ai through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language specification of this Python code. NOTE:...
CVE-2024-23752
GenerateSDFPipeline in syntheticdataframe in PandasAI aka pandas-ai through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language specification of this Python code. NOTE:...
CVE-2024-23752
Summary: CVE-2024-23752 affects PandasAI (pandas-ai) up to v1.5.17. The vulnerability resides in GenerateSDFPipeline within synthetic_dataframe, where an English-language specification can cause SDFCodeExecutor to run arbitrary Python code. This leads to possible arbitrary code execution with hig...