265 matches found
Apache Struts <2.3.1.1 - Remote Code Execution
Apache Struts before 2.3.1.1 is susceptible to remote code execution. When developer mode is used in the DebuggingInterceptor component, a remote attacker can execute arbitrary OGNL commands via unspecified vectors, which can allow for execution of malware, obtaining sensitive information,...
Joomla! Component jesectionfinder - Local File Inclusion
A directory traversal vulnerability in the JExtensions JE Section/Property Finder jesectionfinder component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php. id: CVE-2010-2680 info: name: Joomla!...
Joomla! Component GMapFP 3.5 - Arbitrary File Upload
Joomla! Component GMapFP 3.5 is vulnerable to arbitrary file upload vulnerabilities. An attacker can access the upload function of the application without authentication and can upload files because of unrestricted file upload which can be bypassed by changing Content-Type & name file too double...
Joomla! Roland Breedveld Album 1.14 - Local File Inclusion
Joomla! Roland Breedveld Album 1.14 comalbum is susceptible to local file inclusion because it allows remote attackers to access arbitrary directories and have unspecified other impact via a .. dot dot in the target parameter to index.php. id: CVE-2009-3318 info: name: Joomla! Roland Breedveld...
Roxy Fileman 1.4.5 - Unrestricted File Upload
Roxy Fileman 1.4.5 is susceptible to unrestricted file upload via upload.php. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id: CVE-2018-20526 info: name: Roxy Fileman 1.4.5 -...
Joomla! Plugin Core Design Scriptegrator - Local File Inclusion
A directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files...
Fonality trixbox - Local File Inclusion
Multiple local file inclusion vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .. dot dot in the lang parameter to 1 home/index.php, 2 asteriskinfo/asteriskinfo.php, 3 repo/repo.php, or 4 endpointcfg/endpointcfg.php in maint/modules/. id: CVE-2014-5111 info...
mooDating 1.2 - Cross-site scripting
A vulnerability was found in mooSocial mooDating 1.2. It has been classified as problematic. Affected is an unknown function of the file /matchmakings/question of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-235194 is...
WordPress Plugin Redirect 404 to Parent 1.3.0 - Cross-Site Scripting
The settings page of the plugin did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue. id: CVE-2021-24286 info: name: WordPress Plugin Redirect 404 to Parent 1.3.0 - Cross-Site Scripting author: r3Y3r53 severity: medium descriptio...
Joomla! Component FDione Form Wizard 1.0.2 - Local File Inclusion
A directory traversal vulnerability in the Dione Form Wizard aka FDione or comdioneformwizard component 1.0.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. id: CVE-2010-2045 info: name: Joomla! Component...
Joomla! Component ZiMBCore 0.1 - Local File Inclusion
A directory traversal vulnerability in the ZiMB Core aka ZiMBCore or comzimbcore component 0.1 in the ZiMB Manager collection for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id:...
Joomla! Component JA Voice 2.0 - Local File Inclusion
A directory traversal vulnerability in the JA Voice comjavoice component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. id: CVE-2010-1982 info: name: Joomla! Component JA Voice 2.0 - Local File Inclusion author: daffainfo...
D-Link DIR-600M - Authentication Bypass
D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices can be accessed directly without authentication and lead to disclosure of information about the WAN, which can then be leveraged by an attacker to modify the data fields of the page. id: CVE-2019-13101 info: name: D-Link DIR-600M - Authentication...
Tree Page View Plugin < 1.6.7 - Cross-Site Scripting
The CMS Tree Page View plugin for WordPress has a Reflected Cross-Site Scripting vulnerability up to version 1.6.7. This is due to the posttype parameter not properly escaping user input. As a result, users with administrator privileges or higher can inject JavaScript code that will execute...
CVE-2022-24638
AS SEEN ON EXPLOITDB: https://www.exploit-db.com/exploits/51026 DIESE VERSION WURDE BEHOBEN, UM FALSCH NEGATIVE ZU VERHINDERN CVE-2022-24637 Exploit für die nicht authentifizierte RCE in Open Web Analytics OWA 1.7.4. Diese Arbeit basiert auf https://devel0pment.de/?p=2494. HAFTUNGSAUSSCHLUSS:...
JCS
JCS Joomla Component Scanner creato a scopo di penetration testing su Joomla CMS JCS può aiutarti con le ultime vulnerabilità e exploit dei componenti. Il database può essere aggiornato da diverse fonti ed è stato implementato un Crawler per trovare componenti e link dei componenti. Questa versio...
CVE-2017-16995
CVE-2017-16995 Dieses Repository enthält 2 Exploit-Programme in C von ExploitDB zur Privilegieneskalation unter Ubuntu 16.04 unter Ausnutzung der Schwachstelle CVE-2017-16995. 📂 Dateiliste 44298.c 45010.c Beide sind Exploits mit unterschiedlichen Methoden, die verwendet werden können, um...
CVE-2025-67586
creationtimestamp| type| source ---|---|--- 2025-12-20 09:00:05+00:00| published-proof-of-concept| Telegram/IsgSMFcAG-ApRHDdzepdVGoV7GGJJ0rJ6FS3vxu8huYyqZo 2026-04-22 13:01:06+00:00| seen| https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mk3kjypomc27 2026-04-23 21:03:14+00:00| seen|...
