wp-file-manager-0day

CVE-2020-25213 wp-file-manager 6.7 2020年8月20日 WordPress 插件 0day elFinder 漏洞是一个众所周知的漏洞，我的脚本只是将路径改为 "/wp-content/plugins/wp-file-manager/"。不要再要求我为脚本或其他东西提供修复。RTFM... 参考链接： https://www.exploit-db.com/exploits/46481 https://www.exploit-db.com/exploits/46539...

CVE-2020-25213

This repository does not have a README...

WordPress Advanced Access Manager - Path Traversal

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

Wordpress-CVE-2020-25213

This repository does not have a README...

CVE-2020-25213

此存储库没有 README。...

wp-file-manager-exploit-CVE-2020-25213-with-Zerologon

wp-file-manager-exploit-CVE-2020-25213-with-Zerologon 课程作业项目 NT205.P21.ANTT 网络攻击 利用Zerologon漏洞攻击Windows Server 2019，使用Garble、Chisel、Evil-WinRM、Impacket以及客户端机器上的易受攻击的WordPress插件 视频演示：https://www.youtube.com/watch?v=t-GOHGlP1to...

wordpress-rce-vapt-cve-2020-25213

WordPress RCE 利用与缓解措施 CVE-2020-25213 📌 项目概述 本项目是为 IE4012 – 进攻性黑客战术与策略 模块开发的。 它在受控实验环境中演示了完整的网络安全攻击生命周期，包括： 社会工程攻击 恶意软件模拟 漏洞利用 VAPT 分析 安全补丁实施 🎯 目标漏洞 CVE 编号： CVE-2020-25213 漏洞： WordPress 文件管理器插件远程代码执行 严重性： 严重 CVSS 9.8 类型： 未认证文件上传 → 远程代码执行 🧪 实验环境...

CVE-2018-25213

creationtimestamp| type| source ---|---|--- 2026-03-26 14:45:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxtrin5432s 2026-03-28 04:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi3qntwlre2a...

CVE-2018-25213

Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query...

CVE-2019-25213

creationtimestamp| type| source ---|---|--- 2025-11-29 18:33:45+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-25213.yaml 2025-12-01 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6xda4hvzu2e 2025-12-02...

CVE-2024-25213

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

CVE-2022-25213

Improper physical access control and use of hard-coded credentials in /etc/passwd permits an attacker with physical access to obtain a root shell via an unprotected UART port on the device. The same port exposes an unauthenticated Das U-Boot BIOS shell...

CVE-2025-25213

Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...

CVE-2025-25213

creationtimestamp| type| source ---|---|--- 2025-04-09 09:47:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11032 2025-04-09 12:35:29+00:00| seen| https://t.me/cvedetector/22547...

CVE-2025-25213

Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...

CVE-2025-25213

Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...

CVE-2025-25213

The CVE-2025-25213 issue affects Inaba Denki Sangyo Co., Ltd. Wi‑Fi AP UNIT AC-WPS-11ac series (affected versions include v2.0.03P and prior). Root cause: improper restriction of rendered UI layers or frames, enabling unintended operations when a logged‑in user views/clicks on content hosted on a...

CVE-2023-25213

creationtimestamp| type| source ---|---|--- 2025-02-14 10:06:00+00:00| seen| Telegram/tTotBQGK6jJ-ckFpXvpoxXUES9m7Ii5TEtfQKDG2eftdJch...

CVE-2019-25213

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

CVE-2020-25213

The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload or mkfile and p...