413 matches found
CVE-2019-11447-EXP
CVE-2019-11447-EXP CuteNews Avatar 2.1.2 Remote Code Execution Vulnerability Before run the python script, run the nc command firstly. The default port is 1234. Then execute exploit.py, follow the tips and input required contents...
CVE-2019-11447_reverse_shell_upload
CVE-2019-11447 CuteNews 2.1.2 Reverse Shell Upload A slightly modified version of the Mt-Code POC which spawns a full reverse shell rather than a web shell. This exploit uses the famous PentestMonkey PHP Reverse Shell. Install pip install -r requirements.txt Example use: Create a user on the...
CVE-2019-11447_CuteNews-AvatarUploadRCE
CVE-2019-11447 Exploit/PoC - CuteNews 2.1.2 Avatar upload RCE Authenticated Exploit Code for CVE-2019-11447 aka CuteNews 2.1.2 Avatar upload RCE Authenticated Exploit Links: Expected outcome: Login/Register an account, craft user selected PHP file with .gif magic bytes, uploads the file as an...
CVE-2019-11447
CVE-2019-11447 - PoC Exploits CuteNews 2.1.2 via poor file upload checks used when uploading an avatar image leading to RCE. Installation Clone the repository and install the requirements. pip install -r requirements.txt Usage In order to upload an avatar you will require a CuteNews user account,...
CVE-2019-11447-POC
sadnews CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept POC by CRFSlick, discovered by AkkuS An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatarfile field to index.php?mod=main&opt=personal...
CutePHP CuteNews 路径遍历漏洞
CutePHP CuteNews is a news management system. The system has features such as search, file upload management, access control, backup and restore. A path traversal vulnerability exists in CutePHP CuteNews version 6.6, which stems from a directory traversal in the Browse Templates feature that coul...
CVE-2019-11447
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatarfile field to index.php?mod=main=personal. There is no effective control of $imgsize in /core/modules/dashboard.php. The header content of a...
EUVD-2007-6627
Malware in sbrugna...
EUVD-2006-3656
Malware in sbrugna...
EUVD-2005-3009
Malware in sbrugna...
EUVD-2004-0659
Malware in sbrugna...
EUVD-2006-6283
Malware in sbrugna...
EUVD-2005-3591
Malware in sbrugna...
EUVD-2006-1925
Malware in sbrugna...
EUVD-2006-1343
Malware in sbrugna...
EUVD-2020-26719
Malware in sbrugna...
EUVD-2006-2251
Malware in sbrugna...
EUVD-2006-6529
Malware in sbrugna...