699 matches found
CVE-2009-2265
cf8-upload.py ⭐ CVE-2009-2265を悪用するためのPython3スクリプトです。 エクスプロイト - CVE-2009-2265 ❗ このスクリプトは、Adobe ColdFusion 8.0.1に実装されたFCKeditor 2.6.4.1の脆弱性を悪用します： https://vulners.com/cve/CVE-2009-2265 このスクリプトにより、ユーザーはColdFusion 8.0.1が動作するターゲットコンピュータにファイルをアップロードして実行することができます。 前提条件 ✔ python3...
CVE-2009-2265
CVE-2009-2265 - Adobe ColdFusion 8 ファイルアップロード RCE CVE-2009-2265 エクスプロイトの POC を Rust で実装したもので、Adobe ColdFusion 8 を対象としています。 脆弱性の概要 この脆弱性により、認証されていない攻撃者が Adobe ColdFusion 8 を実行しているサーバーの Web アクセス可能なディレクトリに任意のファイルをアップロードでき、リモートコード実行 RCE につながります。 技術的詳細 脆弱性 : ヌルバイトインジェクションによるディレクトリトラバーサル コンポーネント :...
CVE-2009-2265-fix
CVE-2009-2265 - Adobe ColdFusion RCE ColdFusionに同梱されているFCKeditorコンポーネントにおける任意ファイルアップロードを悪用した、認証不要のリモートコード実行。ファイルアップロードエンドポイントはfilenameパラメータでヌルバイトインジェクションを受け付けるため、JSPウェブシェルをアップロードし、サーバーによって直接実行させることができる。 脆弱なバージョン バージョン| ステータス ---|--- ColdFusion 8.0| 脆弱 ColdFusion 8.0.1| 脆弱 ColdFusion 9.0| 脆弱...
CVE-2021-47965
WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerous file types without validation. Attackers can upload arbitrary files through the filemanager upload endpoint to achieve remote co...
CVE-2021-47965
WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerous file types without validation. Attackers can upload arbitrary files through the filemanager upload endpoint to achieve remote co...
CVE-2021-47965 WordPress Plugin WP Super Edit 2.5.4 Unrestricted File Upload
WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerous file types without validation. Attackers can upload arbitrary files through the filemanager upload endpoint to achieve remote co...
CVE-2021-47965
WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerous file types without validation. Attackers can upload arbitrary files through the filemanager upload endpoint to achieve remote co...
CVE-2021-47965
CVE-2021-47965 affects WordPress plugin WP Super Edit (versions up to 2.5.4) and involves an unrestricted file upload in the FCKeditor component. The vulnerability allows uploading arbitrary files via the filemanager upload endpoint, enabling remote code execution and complete system compromise. ...
CVE-2021-47965 WordPress Plugin WP Super Edit 2.5.4 Unrestricted File Upload
WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerous file types without validation. Attackers can upload arbitrary files through the filemanager upload endpoint to achieve remote co...
EUVD-2021-34820
WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerous file types without validation. Attackers can upload arbitrary files through the filemanager upload endpoint to achieve remote co...
PT-2026-41344
Name of the Vulnerable Software and Affected Versions WP Super Edit versions 2.5.4 and earlier Description The FCKeditor component contains an unrestricted file upload flaw. Attackers can upload arbitrary and dangerous file types without validation through the 'filemanager upload' endpoint, which...
WordPress plugin WP Super Edit 代码问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
Exploit for Path Traversal in Fckeditor
No d...
EUVD-2012-2072
Malware in sbrugna...
EUVD-2006-6960
Malware in sbrugna...
EUVD-2009-2320
Malware in sbrugna...
EUVD-2005-0614
Malware in sbrugna...
EUVD-2009-4838
Malware in sbrugna...