Lucene search
+L

18 matches found

Kitploit
Kitploit
added 2026/09/23 4:14 p.m.10 views

CVE-2025-29306-PoC-FoxCMS-RCE

CVE-2025-29306 - Exploit de Ejecución Remota de Código en FoxCMS Un exploit en Python para CVE-2025-29306, una vulnerabilidad de ejecución remota de código en FoxCMS. Esta herramienta permite probar objetivos individuales o escanear múltiples hosts en masa. Características Capacidad de escaneo de...

8.7AI score0.46583EPSS
SaveExploits11
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.196 views

FoxCMS v.1.2.5 - Remote Code Execution

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. id: CVE-2025-29306 info: name: FoxCMS v.1.2.5 - Remote Code Execution author: ritikchaddha severity: critical description: | An issue in FoxCMS v.1.2.5 allows a...

8.7AI score0.46583EPSS
SaveExploits11References3
Kitploit
Kitploit
added 2026/09/22 12:03 p.m.11 views

day06-foxcms-rce

Day06 — FoxCMS-style RCE CVE-2025-29306 — Educational lab This tiny lab simulates the core idea behind CVE-2025-29306 : unsafe use of unserialize on attacker-controlled input leading to remote code execution. This is a minimal, intentionally vulnerable educational replica — not FoxCMS itself...

8.9AI score0.46583EPSS
SaveExploits11
GithubExploit
GithubExploit
added 2026/01/07 5:08 a.m.262 views

Exploit for Code Injection in Foxcms

Mass-CVE-2025-29306...

9.8CVSS6.8AI score0.46583EPSS
SaveExploits11
GithubExploit
GithubExploit
added 2025/09/18 4:53 a.m.302 views

Exploit for Code Injection in Foxcms

Day06 — FoxCMS-style RCE CVE-2025-29306 — Educational lab T...

9.8CVSS8.1AI score0.46583EPSS
SaveExploits11
RedhatCVE
RedhatCVE
added 2025/05/22 10:44 p.m.14 views

CVE-2022-29306

IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the idpage parameter in application/models/articlemodel.php...

9.8CVSS8.3AI score0.01107EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2025/04/25 3:45 a.m.263 views

Exploit for Code Injection in Foxcms

CVE-2025-29306 - FoxCMS Remote Code Execution Exploit !Pytho...

9.8CVSS10AI score0.46583EPSS
SaveExploits11
Exploit DB
Exploit DB
added 2025/04/19 12:00 a.m.390 views

FoxCMS 1.2.5 - Remote Code Execution (RCE)

Date: 2025-04-17 Exploit Title: Exploit Author: VeryLazyTech Vendor Homepage: https://www.foxcms.org/ Software Link: https://www.foxcms.cn/ Version: FoxCMS v.1.2.5 Tested on: Ubuntu 22.04, Windows Server 2019 CVE: CVE-2025-29306 Website: https://www.verylazytech.com !/bin/bash banner cat " exit 1...

8.3AI score0.46583EPSS
SaveExploits11
GithubExploit
GithubExploit
added 2025/04/17 8:44 a.m.621 views

Exploit for Code Injection in Foxcms

POC - CVE-2025-29306 FOXCMS /images/index.html Code Execution...

9.8CVSS9.8AI score0.46583EPSS
SaveExploits11
Circl
Circl
added 2025/03/27 8:50 p.m.25 views

CVE-2025-29306

creationtimestamp| type| source ---|---|--- 2025-03-27 20:50:25+00:00| seen| https://t.me/cvedetector/21333 2025-04-17 10:18:23+00:00| seen| https://bsky.app/profile/bilaltariq01.bsky.social/post/3lmyuweu2gf24 2025-04-18 13:44:02+00:00| seen|...

9.8CVSS8.2AI score0.46583EPSS
SaveExploits11References16
NVD
NVD
added 2025/03/27 7:15 p.m.28 views

CVE-2025-29306

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component...

9.8CVSS0.46583EPSS
SaveExploits11References1
Circl
Circl
added 2023/09/13 12:00 p.m.11 views

CVE-2023-29306

creationtimestamp| type| source ---|---|--- 2023-09-13 12:00:23+00:00| seen| https://t.me/truesecator/4841 2023-09-13 12:34:51+00:00| seen| https://t.me/cibsecurity/70369...

6.1CVSS6.3AI score0.00461EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/13 9:15 a.m.11 views

CVE-2023-29306

Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

6.1CVSS5.7AI score0.00461EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/09/13 8:27 a.m.42 views

CVE-2023-29306 Adobe Connect Reflected Cross-Site Scripting (XSS) Arbitrary code execution

Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser...

6.1CVSS6AI score0.00461EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/12 12:00 a.m.27 views

Adobe Connect <= 12.3.0 Multiple Arbitrary Code Execution Vulnerabilities (APSB23-33)

The version of Adobe Connect installed on the remote host is prior to 12.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-33 advisory. - Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacke...

6.1CVSS6.5AI score0.00461EPSS
SaveExploits0References3
NVD
NVD
added 2022/05/12 4:15 p.m.28 views

CVE-2022-29306

IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the idpage parameter in application/models/articlemodel.php...

9.8CVSS0.01107EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/05/12 3:34 p.m.41 views

CVE-2022-29306

IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the idpage parameter in application/models/articlemodel.php...

10AI score0.01107EPSS
SaveExploits1References1
CVE
CVE
added 2022/05/12 3:34 p.m.75 views

CVE-2022-29306

IonizeCMS v1.0.8.1 is affected by a SQL injection in the id_page parameter of application/models/article_model.php (CVE-2022-29306). The vulnerability is confirmed by multiple sources in the connected documents, with CVSSv3.1 base score 9.8 (CRITICAL) and CVSSv2 base score 7.5 (HIGH), indicating ...

9.8CVSS9.8AI score0.01107EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder