Lucene search
+L

69 matches found

Kitploit
Kitploit
•added 2026/10/04 4:00 p.m.•17 views

CVE-2022-44870

CVE-2022-44870 maccms admin+ xss attacks Overview Manufacturer's website information:https://maccms.pro Source code download address : https://github.com/maccmspro/maccms10.git 1. Affected version: V2021.1000.2000 2.Vulnerability details https://github.com/maccmspro/maccms10/issues/23 Go to...

6.1CVSS6.5AI score0.00498EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•4 views

CVE-2025-23458: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rakessh Ads24 Lite wp-ad-management allows Reflected XSS.This issue affects Ads24 Lite: from n/a through = 1.0...

7.1CVSS5.8AI score0.00178EPSS
SaveExploits0References1
Veracode
Veracode
•added 2025/12/13 6:51 a.m.•14 views

Remote Code Execution (RCE)

FeehiCMS is vulnerable to Remote Code Execution RCE. The vulnerability is due to unrestricted file upload in the Ad Management feature without proper validation or execution restrictions, which allows an attacker to upload and execute malicious PHP files...

6.5CVSS6.3AI score0.00396EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/03 12:26 a.m.•12 views

CVE-2025-65657

FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes or stores in an executable location without sufficient validation, sanitization, or executi...

6.5CVSS8.8AI score0.00396EPSS
SaveExploits1References1
Snyk
Snyk
•added 2025/12/02 9:51 p.m.•14 views

Arbitrary Command Injection

Overview feehi/cms is a Feehi CMS project template. Affected versions of this package are vulnerable to Arbitrary Command Injection via the Ad management feature. An attacker can execute arbitrary code on the server by uploading a crafted PHP file, which is then executed due to insufficient...

7.7CVSS8AI score0.00396EPSS
SaveExploits1References2
OSV
OSV
•added 2025/12/02 9:31 p.m.•19 views

GHSA-MCXQ-54F4-MMX5 FeehiCMS Has a Remote Code Execution via Unrestricted File Upload in Ad Management

FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes or stores in an executable location without sufficient validation, sanitization, or executi...

7.7CVSS8.7AI score0.00396EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/12/02 9:31 p.m.•21 views

EUVD-2025-200325

FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes or stores in an executable location without sufficient validation, sanitization, or executi...

6.5CVSS8.2AI score0.00396EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2025/12/02 9:31 p.m.•17 views

FeehiCMS Has a Remote Code Execution via Unrestricted File Upload in Ad Management

FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes or stores in an executable location without sufficient validation, sanitization, or executi...

6.5CVSS6.6AI score0.00396EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2025/12/02 9:15 p.m.•13 views

CVE-2025-65657

FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes or stores in an executable location without sufficient validation, sanitization, or executi...

6.5CVSS0.00396EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/02 12:00 a.m.•0 views

CVE-2025-65657: Improper Neutralization of Special Elements used in a Command

FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes or stores in an executable location without sufficient validation, sanitization, or executi...

6.5CVSS6.6AI score0.00396EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/02 12:00 a.m.•15 views

PT-2025-48783

Name of the Vulnerable Software and Affected Versions FeehiCMS version 2.1.1 Description FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes without sufficient validation. An attacker can upload a crafted PHP file, causing the application or...

6.5CVSS7.9AI score0.00396EPSS
SaveExploits1References8
CVE
CVE
•added 2025/12/02 12:00 a.m.•31 views

CVE-2025-65657

FeehiCMS version 2.1.1 is vulnerable to Remote Code Execution (RCE) due to an unrestricted file upload in the Ad Management feature. The root cause is the lack of sufficient validation, sanitization, or execution restrictions, allowing authenticated remote attackers to upload and execute crafted ...

6.5CVSS6.6AI score0.00396EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/02 12:00 a.m.•9 views

CVE-2025-65657

FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes or stores in an executable location without sufficient validation, sanitization, or executi...

6.6AI score0.00396EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/12/02 12:00 a.m.•16 views

Revive Adserver 安全漏洞

Revive Adserver is an open source ad management system from the Revive Adserver team. The system provides ad placement, ad space management, statistics and other functions. A security vulnerability exists in Revive Adserver that stems from improper handling of usernames, which could lead to...

5.4CVSS5.5AI score0.00244EPSS
SaveExploits1References2
OSV
OSV
•added 2025/12/02 12:00 a.m.•12 views

CVE-2025-65657

FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. FeehiCMS version 2.1.1 allows authenticated remote attackers to upload files that the server later executes or stores in an executable location without sufficient validation, sanitization, or executi...

6.5CVSS8.7AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2007-5968

Malware in sbrugna...

6.5CVSS6.4AI score0.00869EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2009-2228

Malware in sbrugna...

7.5CVSS6.4AI score0.01125EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-47801

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00498EPSS
SaveExploits1References2
CNVD
CNVD
•added 2025/07/08 12:00 a.m.•15 views

WordPress ads pro SQL injection vulnerability (CNVD-2025-15421)

WordPress Ads Pro is a multi-purpose ad management plugin, mainly used for flexible management of ad space in WordPress websites, supporting banner ad display, billing mode settings and user-friendly ad placement solutions. WordPress ads pro suffers from a SQL injection vulnerability, which stems...

7.5CVSS8.2AI score0.00373EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/07/08 12:00 a.m.•19 views

WordPress ads pro SQL Injection Vulnerability

WordPress Ads Pro is a multi-purpose ad management plugin, mainly used for flexible management of ad space in WordPress websites, supporting banner ad display, billing mode settings and user-friendly ad placement solutions. WordPress ads pro suffers from a SQL injection vulnerability, which stems...

7.5CVSS7.8AI score0.00373EPSS
SaveExploits0References1
Rows per page
Query Builder