39 matches found
CVE-2020-25213
This repository does not have a README...
wp-file-manager-0day
CVE-2020-25213 wp-file-manager 6.7 20th Aug 2020 Wordpress Plugin 0day elFinder vulnerability is a well-know vulnerability, my script only changes path to "/wp-content/plugins/wp-file-manager/". Stop requesting fixes in script or something else for me. RTFM... References:...
WordPress Advanced Access Manager - Path Traversal
The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...
Wordpress-CVE-2020-25213
This repository does not have a README...
wp-file-manager-exploit-CVE-2020-25213-with-Zerologon
wp-file-manager-exploit-CVE-2020-25213-with-Zerologon Project for Course Works NT205.P21.ANTT Cyber-attack Exploit Windows server 2019 vulnerable to Zerologon with Garble, Chisel, Evil-WinRM, Impacket and a vulnerable Wordpress plugin on a Client machine Video demo:...
CVE-2020-25213
This repository does not have a README...
wordpress-rce-vapt-cve-2020-25213
WordPress RCE Exploitation & Mitigation CVE-2020-25213 ๐ Project Overview This project was developed as part of the IE4012 โ Offensive Hacking Tactics & Strategies module. It demonstrates a full cybersecurity attack lifecycle in a controlled lab environment, including: Social engineering attack...
wp-file-manager-poc-chain
wp-file-manager-poc-chain Offensive security proof-of-concept...
CVE-2018-25213
creationtimestamp| type| source ---|---|--- 2026-03-26 14:45:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxtrin5432s 2026-03-28 04:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi3qntwlre2a...
CVE-2018-25213
Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query...
CVE-2019-25213
creationtimestamp| type| source ---|---|--- 2025-11-29 18:33:45+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-25213.yaml 2025-12-01 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6xda4hvzu2e 2025-12-02...
CVE-2024-25213
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...
CVE-2022-25213
Improper physical access control and use of hard-coded credentials in /etc/passwd permits an attacker with physical access to obtain a root shell via an unprotected UART port on the device. The same port exposes an unauthenticated Das U-Boot BIOS shell...
CVE-2025-25213
Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...
CVE-2025-25213
creationtimestamp| type| source ---|---|--- 2025-04-09 09:47:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11032 2025-04-09 12:35:29+00:00| seen| https://t.me/cvedetector/22547...
CVE-2025-25213
Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...
CVE-2025-25213
Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...
CVE-2025-25213
The CVE-2025-25213 issue affects Inaba Denki Sangyo Co., Ltd. WiโFi AP UNIT AC-WPS-11ac series (affected versions include v2.0.03P and prior). Root cause: improper restriction of rendered UI layers or frames, enabling unintended operations when a loggedโin user views/clicks on content hosted on a...
CVE-2023-25213
creationtimestamp| type| source ---|---|--- 2025-02-14 10:06:00+00:00| seen| Telegram/tTotBQGK6jJ-ckFpXvpoxXUES9m7Ii5TEtfQKDG2eftdJch...
CVE-2019-25213
The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...