102 matches found
CVE-2016-5084
creationtimestamp| type| source ---|---|--- 2026-07-16 13:00:05+00:00| seen| https://t.me/KaitNews/190 2026-07-17 00:00:51+00:00| published-proof-of-concept| https://t.me/KaitNews/190...
CVE-2026-5084
WebDyne::Session versions through 2.075 for Perl generates the session id insecurely. The session handler generates the session id from an MD5 hash seeded with a call to the built-in rand function. The rand function is passed a maximum value based on the process id, the epoch time and the referen...
CVE-2026-5084
creationtimestamp| type| source ---|---|--- 2026-05-11 09:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116555122608291199 2026-05-11 09:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlkvxd5bwi22 2026-05-11 11:18:17+00:00| seen|...
📄 OpenSSL 3.x ASN.1 AES‑GCM Nonce Stack Corruption
This Metasploit auxiliary module generates a specially crafted CMS file encoded in DER format to test a stack-based buffer overflow vulnerability in OpenSSL's ASN.1 parser related to improper handling of oversized AES-GCM nonce IV values within AES-GCM-Parameters as defined in RFC 5084. The...
Linux Distros Unpatched Vulnerability : CVE-2017-5084
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in image-burner in Google Chrome OS prior to 59.0.3071.92 allowed a local attacker to read local files via dbus-send commands to a...
WordPress Post Grid Master plugin <= 3.4.13 - Reflected Cross-Site Scripting via argsArray['read_more_text'] vulnerability
Reflected Cross-Site Scripting via argsArray'readmoretext' vulnerability discovered by Alefe Souza in WordPress Plugin Post Grid Master versions = 3.4.13...
CVE-2019-5084
An exploitable heap out-of-bounds write vulnerability exists in the TIF-parsing functionality of LEADTOOLS 20. A specially crafted TIF image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution. An attacker can specially craft a TIF ima...
Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form
Hash Form 9.9.1 file upload vulnerability Exploit The Hash...
Metasploit Weekly Wrap-Up 06/07/2024
New OSX payloads:ARMed and Dangerous In addition to an RCE leveraging CVE-2024-5084 to gain RCE through a WordPress Hash form, this release features the addition of several new binary OSX stageless payloads with aarch64 support: Execute Command, Shell Bind TCP, and Shell Reverse TCP. The new...
CVE-2024-5084
creationtimestamp| type| source ---|---|--- 2024-06-05 08:42:42+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wphashformrce.rb 2024-07-03 04:29:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7843 2024-09-17 21:29:50+00:00|...
WordPress Hash Form Plugin Remote Code Execution Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Hash Form Plugin RCE', 'Description' = %q The Hash Form – Drag & Drop Form Builder plugin for WordPress suffers from a critical...
Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form
Wordpress Hash Form – Drag & Drop Form Builder = 1.1.0 - Unau...
WordPress Hash Form Plugin <= 1.1.0 is vulnerable to Remote Code Execution (RCE)
Software Hash Form Type Plugin Vulnerable versions = 1.1.0 Fixed in 1.1.1 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-5084 Patch priority High CVSS severity High 10 Developer Claim ownership PSID da300dc670df Credits Francesco Carlucci Required privilege...
CVE-2024-5084
The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fileuploadaction' function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files ...
CVE-2024-5084 Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fileuploadaction' function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files ...
CVE-2024-5084 Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fileuploadaction' function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files ...
CVE-2019-5084
creationtimestamp| type| source ---|---|--- 2024-02-05 10:46:10+00:00| seen| https://t.me/ctinow/179116...
CVE-2023-5084
creationtimestamp| type| source ---|---|--- 2023-09-20 14:30:06+00:00| seen| https://t.me/cibsecurity/70791...