209 matches found
Vulnerability of โBefore and After Photosโ: Comparison of images before/after by a content management system (CMS) like 1C-Bitrix. This feature allows unauthorized users to execute arbitrary code by enabling unlimited uploading of dangerous types of files.
Vulnerability of โBefore and After Photosโ: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...
Vulnerability of the โKOMTEK Cassa Kurierโ module of the 1C-Bitrix content management system: Website management related to the lack of authentication for critical functions, allowing attackers to compromise the integrity and accessibility of protected information
Vulnerability of the โKOMTEK Cassa Kurierโ module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...
Bitrix Site Manager 6.5 - Open Redirect
Bitrix Site Manager 6.5 contains an open redirect vulnerability in redirect.php. Remote attackers can redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter. id: CVE-2008-2052 info: name: Bitrix Site Manager 6.5 - Open Redirect author:...
Bitrix24 <=20.0.0 - Cross-Site Scripting
The Web Application Firewall in Bitrix24 up to and including 20.0.0 allows XSS via the itemsITEMSID parameter to the components/bitrix/mobileapp.list/ajax.php/ URI. id: CVE-2020-13483 info: name: Bitrix24 20.0.0 to mitigate this vulnerability. reference: -...
Bitrix Site Manager - Remote Code Execution
In the vote aka "Polls, Votes" module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code. id: CVE-2022-27228 info: name: Bitrix Site Manager - Remote Code Execution author: theamanrawat severity: critical description: In the vote aka "Polls, Votes...
CVE-2025-67887
๐ก๏ธ ะัะฟัะฐะฒะปะตะฝะธะต ะดะปั "ััะทะฒะธะผะพััะธ" CVE-2025-67887/86 ะฒ ะผะพะดัะปะต Translate 1C-ะะธััะธะบั 1ะก-ะะธััะธะบั ะะตะทะพะฟะฐัะฝะพััั ะฆะตะฝัั ะธะฝัะพัะผะฐัะธะพะฝะฝะพะน ะฑะตะทะพะฟะฐัะฝะพััะธ ะธ ะผะพะฝะธัะพัะธะฝะณะฐ ะธะฝัะธะดะตะฝัะพะฒ ะบะพะผะฟะฐะฝะธะธ ยซ1ะก-ะะธััะธะบัยป ะธะฝัะพัะผะธััะตั ะ Telegram-ะบะฐะฝะฐะปะฐั ะฟะพัะฒะธะปะฐัั ะธะฝัะพัะผะฐัะธั ะพ ะฝะฐะปะธัะธะธ ััะทะฒะธะผะพััะธ ะฒ ะผะพะดัะปะต "ะะตัะตะฒะพะด", ัะบะพะฑั ะฟะพะทะฒะพะปัััะตะน...
CVE-2025-67887
CVE-2025-67887 1C-Bitrix = 25.100.500 Translate ใขใธใฅใผใซ ใชใขใผใใณใผใๅฎ่กใฎ่ๅผฑๆง...
CVE-2025-67887
1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess file. NOTE: this is disputed by the Supplier because this is intended behavior for the high-privilege...
CVE-2025-67887
1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess file. NOTE: this is disputed by the Supplier because this is intended behavior for the high-privilege...
CVE-2025-67887
1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess file. NOTE: this is disputed by the Supplier because this is intended behavior for the high-privilege...
1C-Bitrix ๅฎๅ จๆผๆด
1C-Bitrix is a website platform system developed by the Russian company 1C-Bitrix. It integrates content management, e-commerce, and enterprise portal functions. Versions of 1C-Bitrix 25.100.500 and earlier contained security vulnerabilities. These vulnerabilities stemmed from users with the RIGH...
CVE-2025-67887
1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess file. NOTE: this is disputed by the Supplier because this is intended behavior for the high-privilege...
EUVD-2025-209735
1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess file. NOTE: this is disputed by the Supplier because this is intended behavior for the high-privilege...
creepytrix
๐ CREEPYTRIX - Bitrix Pentest Tool v1.1 !Versionhttps://i...
CVE-2024-34887
Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request...
CVE-2024-34883
Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts passwords via HTTP GET request...
Exploit for CVE-2025-67887
๐ก๏ธ ะัะฟัะฐะฒะปะตะฝะธะต ะดะปั "ััะทะฒะธะผะพััะธ" CVE-2025-67887/86 ะฒ ะผะพะดัะปะต Tra...
Exploit for CVE-2025-67887
CVE-2025-67887 1C...
PT-2025-52213
Name of the Vulnerable Software and Affected Versions 1C-Bitrix versions prior to 25.100.501 Description The software contains a remote code execution issue within the Translate Module. The application does not properly validate the contents of archive files before unpacking them, allowing...
๐ CโBitrix 25.100.500 Translate Module Arbitrary File Upload
CโBitrix version 25.100.500 proof of concept exploit that demonstrates an arbitrary file upload vulnerability in the translate module. ============================================================================================================================================= | Title : CโBitrix...