Lucene search
+L

1005 matches found

zdt
zdt
added 2018/04/09 12:00 a.m.78 views

WolfCMS 0.8.3.1 - Cross Site Request Forgery / Open Redirection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WolfCMS 0.8.3.1 Cross Site Request Forgery Google Dork: N/A Date: 04-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://www.wolfcms.org Software Link:...

0.3AI score0.03282EPSS
SaveExploits9
NVD
NVD
added 2018/03/22 1:29 p.m.23 views

CVE-2018-5225

In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 the fixed version for 4.13.0 through 5.4.7, 5.5.0 before 5.5.8 the fixed version for 5.5.x, 5.6.0 before 5.6.5 the fixed version for 5.6.x, 5.7.0 before 5.7.3 the fixed version for 5.7.x, and 5.8.0 before 5.8.2 the...

9.9CVSS9.7AI score0.03491EPSS
SaveExploits0References3
OSV
OSV
added 2018/03/22 1:29 p.m.6 views

CVE-2018-5225

In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 the fixed version for 4.13.0 through 5.4.7, 5.5.0 before 5.5.8 the fixed version for 5.5.x, 5.6.0 before 5.6.5 the fixed version for 5.6.x, 5.7.0 before 5.7.3 the fixed version for 5.7.x, and 5.8.0 before 5.8.2 the...

9.9CVSS6.3AI score0.03491EPSS
SaveExploits0References3
Prion
Prion
added 2018/03/22 1:29 p.m.21 views

Remote code execution

In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 the fixed version for 4.13.0 through 5.4.7, 5.5.0 before 5.5.8 the fixed version for 5.5.x, 5.6.0 before 5.6.5 the fixed version for 5.6.x, 5.7.0 before 5.7.3 the fixed version for 5.7.x, and 5.8.0 before 5.8.2 the...

6.5CVSS9.6AI score0.03491EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2018/03/22 1:00 p.m.70 views

CVE-2018-5225

The vulnerability CVE-2018-5225 affects Atlassian Bitbucket Server and allows authenticated users to achieve remote code execution via the in-browser editing feature by editing a symbolic link within a repository. Affected ranges include Bitbucket Server 4.13.0–5.4.7, 5.5.0–5.5.7, 5.6.0–5.6.4, 5....

9.9CVSS9.6AI score0.03491EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/03/22 1:00 p.m.29 views

CVE-2018-5225

In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 the fixed version for 4.13.0 through 5.4.7, 5.5.0 before 5.5.8 the fixed version for 5.5.x, 5.6.0 before 5.6.5 the fixed version for 5.6.x, 5.7.0 before 5.7.3 the fixed version for 5.7.x, and 5.8.0 before 5.8.2 the...

9.8AI score0.03491EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/03/22 12:00 a.m.10 views

Atlassian Bitbucket Server Remote Code Execution Vulnerability

Atlassian Bitbucket Server is a Git code hosting solution from Atlassian Australia. The solution is capable of managing and reviewing code with features such as diff view, JIRA integration and build integration. A remote code execution vulnerability exists in Atlassian Bitbucket Server, which can...

9.9CVSS8.2AI score0.03491EPSS
SaveExploits0References1
Atlassian
Atlassian
added 2018/03/13 8:23 a.m.35 views

Remote Code Execution via in Browser Editing - CVE-2018-5225

An authenticated user of Bitbucket Server could gain remote code execution using the in browser editing feature via editing a symbolic link within a repository. Affected versions: All versions of Bitbucket Server before 5.4.8 the fixed version for 4.13.0 through to 5.4.7, 5.5.0 before 5.5.8 the...

9.9CVSS2.5AI score0.03491EPSS
SaveExploits0
Atlassian
Atlassian
added 2018/03/13 8:23 a.m.598 views

Remote Code Execution via in Browser Editing - CVE-2018-5225

An authenticated user of Bitbucket Server could gain remote code execution using the in browser editing feature via editing a symbolic link within a repository. Affected versions: All versions of Bitbucket Server before 5.4.8 the fixed version for 4.13.0 through to 5.4.7, 5.5.0 before 5.5.8 the...

9.9CVSS9.5AI score0.03491EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2018/02/15 1:29 p.m.20 views

CVE-2017-18088

Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 the fixed version for 5.3.x, from version 5.4.0 before 5.4.6 the fixed version for 5.4.x, from version 5.5.0 before 5.5.6 the fixed version for 5.5.x, from version 5.6.0 before 5.6.3 the fixed version for 5.6.x,...

4.3CVSS4.8AI score0.00992EPSS
SaveExploits0References2
NVD
NVD
added 2018/02/15 1:29 p.m.33 views

CVE-2017-18087

The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version 5.3.0 before version 5.3.3 and from version 5.4.0 before version 5.4.1 allows remote attackers to write files to disk potentially allowing them...

7.5CVSS8.4AI score0.01756EPSS
SaveExploits0References2
OSV
OSV
added 2018/02/15 1:29 p.m.4 views

CVE-2017-18087

The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version 5.3.0 before version 5.3.3 and from version 5.4.0 before version 5.4.1 allows remote attackers to write files to disk potentially allowing them...

7.5CVSS7.4AI score0.01756EPSS
SaveExploits0References2
Prion
Prion
added 2018/02/15 1:29 p.m.24 views

Code injection

Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 the fixed version for 5.3.x, from version 5.4.0 before 5.4.6 the fixed version for 5.4.x, from version 5.5.0 before 5.5.6 the fixed version for 5.5.x, from version 5.6.0 before 5.6.3 the fixed version for 5.6.x,...

4.3CVSS4.8AI score0.00992EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2018/02/15 1:29 p.m.37 views

Code injection

The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version 5.3.0 before version 5.3.3 and from version 5.4.0 before version 5.4.1 allows remote attackers to write files to disk potentially allowing them...

6CVSS8.2AI score0.77823EPSS
SaveExploits9References2Affected Software1
OSV
OSV
added 2018/02/15 1:29 p.m.6 views

CVE-2017-18088

Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 the fixed version for 5.3.x, from version 5.4.0 before 5.4.6 the fixed version for 5.4.x, from version 5.5.0 before 5.5.6 the fixed version for 5.5.x, from version 5.6.0 before 5.6.3 the fixed version for 5.6.x,...

4.3CVSS5.8AI score0.00992EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/02/15 1:00 p.m.36 views

CVE-2017-18087

The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version 5.3.0 before version 5.3.3 and from version 5.4.0 before version 5.4.1 allows remote attackers to write files to disk potentially allowing them...

8.6AI score0.01756EPSS
SaveExploits0References2
CVE
CVE
added 2018/02/15 1:00 p.m.80 views

CVE-2017-18087

The CVE-2017-18087 entry concerns Atlassian Bitbucket Server. The download commit resource vulnerability in Bitbucket Server affects 5.1.0–5.1.7, 5.2.0–5.2.5, 5.3.0–5.3.3, and 5.4.0–5.4.1. An argument injection in the at parameter can be exploited by remote attackers to write files to disk and po...

7.5CVSS8.3AI score0.01756EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/02/15 1:00 p.m.29 views

CVE-2017-18088

Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 the fixed version for 5.3.x, from version 5.4.0 before 5.4.6 the fixed version for 5.4.x, from version 5.5.0 before 5.5.6 the fixed version for 5.5.x, from version 5.6.0 before 5.6.3 the fixed version for 5.6.x,...

4.8AI score0.00992EPSS
SaveExploits0References2
CVE
CVE
added 2018/02/15 1:00 p.m.59 views

CVE-2017-18088

The CVE-2017-18088 issue affects Atlassian Bitbucket Server prior to fixed versions: 5.3.7 (5.3.x), 5.4.0–5.4.5 (5.4.x), 5.5.0–5.5.5 (5.5.x), 5.6.0–5.6.2 (5.6.x), 5.7.0–5.7.0 (5.7.x), and prior to 5.8.0. The underlying problem is lack of clickjacking protection on various plugin servlet resources...

4.3CVSS4.8AI score0.00992EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2018/02/08 12:00 a.m.11 views

Atlassian Bitbucket Server Path Traversal Vulnerability

Atlassian Bitbucket Server is a Git code hosting solution from Atlassian Australia. The solution is capable of managing and reviewing code with features such as diff view, JIRA integration and build integration. A directory traversal vulnerability exists in the git repository tag rest resource in...

6.5CVSS7.1AI score0.01303EPSS
SaveExploits0References1
Rows per page
Query Builder