406939 matches found
cve-2022-44268
Exploit su misura per HackTheBox Pilgrimage Script Python automatico che utilizza cve-2022-44268 per aggiungere un valore di profilo con un nome file da una filelist di input in un file di input, aggiornare il caricamento dell'immagine usando un file request.req di input da Burpsuite già incluso...
CVE-2026-37072
CVE-2026-37072 Veno File Manager Project Veno File Manager Project 4.4.9 ist anfällig für eine falsche Zugriffskontrolle in admin-head-updates.php Ein nicht authentifizierter Angreifer kann eine Schwachstelle zur Lokalen Dateieinbindung Local File Inclusion im GET-Parameter 'lang' ausnutzen. Durc...
CVE-2026-77139 Path Traversal in extension "Mask" (mask)
The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask module can supply a key containing path traversal sequences to create or delete .html files...
CVE-2026-77139
CVE-2026-77139 is a path traversal vulnerability in the Mask (mask) extension for TYPO3 . The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask m...
EUVD-2026-65337
The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask module can supply a key containing path traversal sequences to create or delete .html files...
CVE-2026-37067
CVE-2026-37067 वेनो फ़ाइल मैनेजर प्रोजेक्ट 4.4.9 में /vfm-admin/admin-panel/view/save-cvs.php में गलत पहुँच नियंत्रण एक अप्रमाणित हमलावर को एक विशेष रूप से तैयार POST अनुरोध के माध्यम से एक वांछित तिथि से आगे के सभी एप्लिकेशन लॉग निकालने की अनुमति देता है।...
CVE-2026-37065
CVE-2026-37065 Veno File Manager Project 4.4.9 è vulnerabile alla cancellazione arbitraria di file. Per sfruttare la vulnerabilità, un attaccante autenticato con il ruolo di superadmin può inviare una richiesta POST appositamente predisposta all'endpoint interessato utilizzando il parametro url...
CVE-2021-44228_scanner
Dateisystem-Scanner für CVE-2021-44228 Zielt darauf ab, JndiLookup.class in nahezu jedem Verzeichnis oder in zip-, jar-, ear-, war-Dateien zu finden, auch tief verschachtelt. find-class-files – Clojure-Implementierung sollte nahezu überall laufen können, wo Java laufen kann, sofern genügend...
bludit-CVE-2019-17240
bludit-CVE-2019-17240 Bypass del login di mitigazione di Bludit e caricamento di file malevoli per richiamare una reverse shell...
CVE-2024-40422
CVE-2024-40422 Gefunden auf exploit-db, beschloss ich, meine eigene aus Übungsgründen zu erstellen. Dieser Exploit sucht die passwd-Datei und gibt den Inhalt auf einem verwundbaren System aus. Dieses Skript nutzt eine Path-Traversal-Schwachstelle in Devika v1 aus. Dank an Alperen Ergel für das...
CVE-2018-11770
CVE-2018-11770 Apache Spark Unauthenticated Reverse Shell RCE Exploit RCE autonomo in Python 3 per Apache Spark riscritto da questo modulo Metasploit POC dell'exploit spiegato qui. Il codice dell'exploit stesso è spiegato qui. Testato con Python 3.7 su questo target. Utilizzo: root@kitploit:...
CVE-2021-23394
Configurazione di riproduzione di elFinder CVE-2021-23394 Questo repository contiene una configurazione di riproduzione per CVE-2021-23394 Esecuzione arbitraria di file in elFinder utilizzando Docker. Configura quattro ambienti per confrontare le versioni vulnerabili e corrette su Apache e Nginx...
EUVD-2026-65326
The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to...
CVE-2026-78566
The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to and including 1.8 . An unauthenticated attacker over the network can include and execute arbitrary files on the server, enabling execution of any PHP code contained in those files. This may be used to bypa...
CVE-2026-78566 Shuffle <= 1.8 - Unauthenticated Local File Inclusion
The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to...
CVE-2026-78562
CVE-2026-78562 is a Local File Inclusion (LFI) vulnerability in the Verdure Core plugin for WordPress, affecting all versions up to and including 1.2 . An unauthenticated attacker can include and execute arbitrary files on the server, enabling PHP code execution in files already present (e.g., up...
EUVD-2026-65325
The Verdure Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used...
WooRefer
WooRefer | CVE-2022-4047 - Reso, Rimborso e Scambio per WooCommerce Strumento automatico di massa per verificare e sfruttare la vulnerabilità in CVE-2022-4047 - Reso, Rimborso e Scambio per WooCommerce install.sh sha1sum install.sh | grep 12345678 md5sum install.sh...
INPGer
INPGer | CVE-2022-4063 - InPost Gallery Strumento automatico di massa per verificare la vulnerabilità CVE-2022-4063 - InPost Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh...