JQShell

JQShell Una versión armada de CVE-2018-9206. Descargo de responsabilidad Usar esto contra servidores que no controlas es ilegal en la mayoría de los países. El autor no se hace responsable de las acciones de quienes usen este software con fines ilegales. Este software está destinado únicamente pa...

cve-2018-9206

CVE-2018-9206 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2018-9206 Autor de la imagen: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9206...

CVE-2018-9206

This repository does not have a README...

CVE-2018-9206

PoC for CVE-2018-9206 About Based on the original Poc. Usage usage: run.py -h -p PREFIX -u USERAGENT host CVE-2018-9206 PoC positional arguments: host the host to check optional arguments: -h, --help show this help message and exit -p PREFIX, --prefix PREFIX The prefix for the path -u USERAGENT,...

CVE-2018-9206

This repository does not have a README...

CVE-2025-63994

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2018-9206. Reason: This record is a duplicate of CVE-2018-9206. Notes: All CVE users should reference CVE-2018-9206 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

Oracle Siebel Server (January 2019 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the January 2019 CPU advisory. - Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI jQuery FileUpload. Supported versions that are affecte...

xn--80aaxagcbv8akg.xn--p1ai Cross Site Scripting vulnerability OBB-2365848

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jncocreation.com Cross Site Scripting vulnerability OBB-2321547

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Blueimp jQuery File Upload 9.22.0 Arbitrary File Upload

Exploit Title: Exploit for Blueimp's jQuery File Upload include include include include include include define BSIZE 1024 define DEBUG 1 define TESTONLY 0 void buildstring char p, char path, char arg, char ar1, int func; int main int argc, char argv int sock = 0, bytesread = 0, total = 0, functio...

Blueimps jQuery File Upload 9.22.0 - Arbitrary File Upload Exploit

Blueimps jQuery File Upload 9.22.0 - Arbitrary File Upload Exploit Exploit Title: Exploit for Blueimp's jQuery File Upload include include include include include include define BSIZE 1024 define DEBUG 1 define TESTONLY 0 void buildstring char p, char path, char arg, char ar1, int func; int main...

Blueimp's jQuery File Upload 9.22.0 - Arbitrary File Upload Exploit

Exploit Title: Exploit for Blueimp's jQuery File Upload include include include include include include define BSIZE 1024 define DEBUG 1 define TESTONLY 0 void buildstring char p, char path, char arg, char ar1, int func; int main int argc, char argv int sock = 0, bytesread = 0, total = 0, functio...

blueimp's jQuery 9.22.0 - (Arbitrary) File Upload (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "blueimp's jQuery Arbitrary File Upload", 'Description' = %q This module exploits an arbitrary file upload in the sample PHP upload handler for...

blueimp jQuery Arbitrary File Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "blueimp's jQuery Arbitrary File Upload", 'Description' = %q This module exploits an arbitrary file upload in the sample PHP upload handler for...

Blueimp jQuery File Upload Remote Code Execution (CVE-2018-9206)

An arbitrary file upload vulnerability has been reported in Blueimp jQuery File Upload Plugin. The vulnerability is due to a fail to adequately sanitize user-supplied input. Successful exploitation of this vulnerability could result in arbitrary code execution...

JQShell - A Weaponized Version Of CVE-2018-9206 (Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0)

JQShell A weaponized version of CVE-2018-9206 Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload = v9.22.0. Disclaimer Using this agianst servers you dont control, is illegal in most countries. The author claims no responsibility for the actions of those who use thi...

@visiosoft/medium-editor-insert-plugin (>=2.4.1, <=2.4.3), ai-django-fileupload (0.1.15) +6 more potentially affected by CVE-2018-9206 via blueimp-file-upload (>=9.5.8, <=9.22.0)

blueimp-file-upload NPM version =9.5.8, =2.4.1, =0.12.0-beta.1, =2.3.0, =0.17.3, =0.1.3, =3.0.0-prerelease.20170216T120000Z, =3.1.0 Source cves: CVE-2018-9206 Source advisory: OSV:GHSA-4CJ8-G9CP-V5WR...

jQuery-File-Upload Arbitrary File Upload Vulnerability (Remote Check)

The version of jQuery-File-Upload running on the remote host is affected by an arbitrary file upload vulnerability. An unauthenticated attacker could leverage this vulnerability to gain access to the host in the context of the web application user. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2018-9206

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload = v9.22.0...

Immunity Canvas: JQUERY_FILE_UPLOAD

Name| jqueryfileupload ---|--- CVE| CVE-2018-9206 Exploit Pack| CANVAS Description| Blueimp jQuery-File-Upload Arbitrary Upload Notes| CVE Name: CVE-2018-9206 VENDOR: Notes: The exploit tests different paths on the target server Repeatability: Infinite References:...