wp-file-manager-0day

CVE-2020-25213 wp-file-manager 6.7 2020년 8월 20일 워드프레스 플러그인 0day elFinder 취약점은 잘 알려진 취약점이며, 제 스크립트는 경로를 "/wp-content/plugins/wp-file-manager/"로 변경할 뿐입니다. 스크립트 수정이나 기타 다른 것을 요청하지 마세요. RTFM... 참조: https://www.exploit-db.com/exploits/46481 https://www.exploit-db.com/exploits/46539...

CVE-2020-25213

이 저장소에는 README가 없습니다...

WordPress Advanced Access Manager - Path Traversal

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

Wordpress-CVE-2020-25213

This repository does not have a README...

CVE-2020-25213

이 저장소에는 README가 없습니다...

wp-file-manager-exploit-CVE-2020-25213-with-Zerologon

wp-file-manager-exploit-CVE-2020-25213-with-Zerologon 과제 프로젝트 NT205.P21.ANTT 사이버 공격 Zerologon에 취약한 Windows Server 2019를 악용하고, 클라이언트 머신에서 Garble, Chisel, Evil-WinRM, Impacket 및 취약한 WordPress 플러그인을 사용 비디오 데모: https://www.youtube.com/watch?v=t-GOHGlP1to...

wordpress-rce-vapt-cve-2020-25213

WordPress RCE 익스플로잇 및 완화 CVE-2020-25213 📌 프로젝트 개요 이 프로젝트는 IE4012 – 오펜시브 해킹 전술 및 전략 모듈의 일환으로 개발되었습니다. 통제된 실험실 환경에서 전체 사이버 보안 공격 라이프사이클을 시연하며, 다음을 포함합니다: 사회공학 공격 악성코드 시뮬레이션 취약점 익스플로잇 VAPT 분석 보안 패치 구현 🎯 대상 취약점 CVE ID: CVE-2020-25213 취약점: WordPress File Manager 플러그인 원격 코드 실행 심각도: 치명적 CVSS 9.8 유형: 인증되...

CVE-2018-25213

creationtimestamp| type| source ---|---|--- 2026-03-26 14:45:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxtrin5432s 2026-03-28 04:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi3qntwlre2a...

CVE-2018-25213

Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query...

CVE-2019-25213

creationtimestamp| type| source ---|---|--- 2025-11-29 18:33:45+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-25213.yaml 2025-12-01 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6xda4hvzu2e 2025-12-02...

CVE-2024-25213

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

CVE-2022-25213

Improper physical access control and use of hard-coded credentials in /etc/passwd permits an attacker with physical access to obtain a root shell via an unprotected UART port on the device. The same port exposes an unauthenticated Das U-Boot BIOS shell...

CVE-2025-25213

Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...

CVE-2025-25213

creationtimestamp| type| source ---|---|--- 2025-04-09 09:47:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11032 2025-04-09 12:35:29+00:00| seen| https://t.me/cvedetector/22547...

CVE-2025-25213

Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...

CVE-2025-25213

Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...

CVE-2025-25213

The CVE-2025-25213 issue affects Inaba Denki Sangyo Co., Ltd. Wi‑Fi AP UNIT AC-WPS-11ac series (affected versions include v2.0.03P and prior). Root cause: improper restriction of rendered UI layers or frames, enabling unintended operations when a logged‑in user views/clicks on content hosted on a...

CVE-2023-25213

creationtimestamp| type| source ---|---|--- 2025-02-14 10:06:00+00:00| seen| Telegram/tTotBQGK6jJ-ckFpXvpoxXUES9m7Ii5TEtfQKDG2eftdJch...

CVE-2019-25213

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

CVE-2020-25213

The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload or mkfile and p...