CVE-2025-57460

CVE-2025-57460 الوصف: ثغرة رفع ملفات في machsol machpanel 8.0.32 تسمح للمهاجم بالحصول على ويب شيل. إثبات المفهوم: انتقل إلى https://controlpaneldomain/Client/SubmitTicket.aspx وقم برفع ويب شيل ASPx ثم أرسل التذكرة، وأخيرًا افتح الملف لتنفيذ الشل وتنفيذ الأوامر مثل whoami. اكتشفته Aljohara...

CVE-2022-34919

CVE-2022-34919 Contensis 콘텐츠 관리 시스템Content Management System 15.2.1.79 이전 버전은 'Classic' 인터페이스에 인증되지 않은 사용자가 임의의 파일을 업로드하고 승인할 수 있는 결함이 있습니다. aspx 파일을 업로드하면 웹 서버의 컨텍스트에서 명령을 실행할 수 있습니다. 이 취약점은 2022년 3월에 발견되었으며, Zengenti가 2022년 4월 8일 릴리스에서 패치했습니다. 재현 단계: 1: 최초 파일 업로드는 다음 엔드포인트에 대한 POST 요청으로 수행됩니다:...

CVE-2022-27249

An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to upload a crafted aspx file to the web root, and then visiting the URL for this aspx resource...

CVE-2020-13774

An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an authenticated attacker to gain remote code execution by uploading a malicious aspx file. The issue is caused by insufficient file extension validation and insecure file operations ...

CVE-2019-10935

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd 11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC...

A way to upload aspxshell for the first-class surveillance system-vulnerability warning-the black bar safety net

Publisher:bincker Time:2010-1-24 The best monitoring system of all know what is going on, the main is to upload the data is filtered out, such as varchar, etc. characters. Yesterday the priest said that there is a monitoring system, can not upload the aspx,I tried the following asp the horse is t...