CVE-2019-8943

CVE-2019-8943 WordPress 5.0.0 - 图片远程代码执行 使用Python对CVE-2019-8942和CVE-2019-8943的利用 : ExploitDB : https://www.exploit-db.com/exploits/49512 针对metasploit的原始利用 : WordPress Core 5.0.0 - 裁剪图片Shell上传 Metasploit : https://www.exploit-db.com/exploits/46662 视频 : 描述:...

wordpress_cropimage

WordPress Crop-Image CVE-2019-8943 Un script en python3 para la ejecución remota de código RCE autenticada CVE-2019-8943 de WordPress Crop-Image. Instala una puerta trasera PHP maliciosa. Comenzando Ejecutando el programa RCE root@kitploit: python3 wprce.py -t http://wordpress.rce/ -u admin -p...

WordPress-RCE-CVE-2019-8942

WordPress 裁剪图片 RCE — CVE-2019-8942 / CVE-2019-8943 Python3 实现的有身份验证的 WordPress 裁剪图片利用链。该仓库围绕两种独立的工作流程组织：一个手动 OSCP 风格脚本和一个完全自动化且集成了反向 Shell 处理器的脚本。 仅可在授权的实验室、CTF、培训平台或你拥有明确测试许可的系统中使用此工具。 受影响的 WordPress 版本 该利用链针对以下漏洞： CVE-2019-8942 CVE-2019-8943 该漏洞的公共 Metasploit 模块描述了受影响的版本： root@kitploit: WordPre...

Astra Linux – Vulnerability in imagemagick

In the CropImage and CropImageToTiles routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets were causing undefined behavior, including integer overflow and out-of-range values, as reported by UndefinedBehaviorSanitizer. Such issues could negatively...

Exploit for Unrestricted Upload of File with Dangerous Type in Wordpress

WordPress Crop Image RCE — CVE-2019-8942 / CVE-2019-8943 Pyth...

CVE-2024-24307

Path Traversal vulnerability in Tunis Soft "Product Designer" productdesigner module for PrestaShop before version 1.178.36, allows a remote attacker to escalate privileges and obtain sensitive information via the ajaxProcessCropImage method...

PT-2024-20348 · Prestashop · Prestashop Product Designer Module

Name of the Vulnerable Software and Affected Versions: PrestaShop Product Designer module versions prior to 1.178.36 Description: The issue allows a remote attacker to escalate privileges and obtain sensitive information. This is achieved via the ajaxProcessCropImage method. Recommendations: For...

PT-2023-5507 · Lg · Lg Simple Editor

Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: The issue arises from an input validation error in the cropImage function when handling directory traversal sequences in the command-line interface. This allows a remote attacker t...

SUSE CVE-2020-25675

In the CropImage and CropImageToTiles routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causing undefined behavior in the form of integer overflow and out-of-range values as reported by UndefinedBehaviorSanitizer. Such issues could cause a...

WordPress 5.0.0 crop-image Shell Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Crop-image Shell Upload', 'Description' = %q This module exploits a path traversal and a local file inclusion vulnerability on WordPres...

WordPress Crop-image Shell Upload

This module exploits a path traversal and a local file inclusion vulnerability on WordPress versions 5.0.0 and use exploit/multi/http/wp/croprce msf undefinedcroprce show actions ...actions... msf undefinedcroprce set ACTION msf undefinedcroprce show options ...show and set options... msf...