476 matches found
PT-2021-11442
Name of the Vulnerable Software and Affected Versions: ArticleCMS versions all Description: A file upload issue exists, allowing malicious users to getshell. Recommendations: For all versions, consider restricting file upload capabilities until a fix is available...
puppetCMS Remote Code Execution Vulnerability
puppetCMS is a small, simple, flat file CMS written in PHP. A remote code execution vulnerability exists in puppyCMS version 5.1. The vulnerability stems from insecure permissions. The vulnerability can be exploited by an attacker via /admin/functions.php as a getshell...
CVE-2020-18890
Rmote Code Execution RCE vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.php...
Remote code execution
Rmote Code Execution RCE vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.php...
CVE-2020-18890
CVE-2020-18890 affects puppyCMS v5.1 (puppyCMS, puppetCMS) with an RCE due to insecure permissions. The vulnerability allows a remote attacker to gain shell access via /admin/functions.php. Root cause: insecure file/permission handling in the admin function. Impact is described as remote code exe...
Exploit for CVE-2021-3129
laravel-CVE-2021-3129-EXP CVE-2021-3129: One-click g...
Exploit for Path Traversal in Saltstack Salt
SaltStack-Exp CVE-2020-11651 CVE-2020-11652 Exec-Master:...
File Upload Vulnerability in Laiku Push Mall System (CNVD-2020-62378)
Laikepush mall system is a system with independent copyright, is an integrated e-commerce system all the functions of the platform. A file upload vulnerability exists in the Laikipu Mall System, which can be exploited by attackers to upload remote files to the server and realize getshell...
Design/Logic Flaw
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell...
CVE-2020-19672
CVE-2020-19672 affects Niushop B2B2C Multi-business basic version V1.11. The vulnerability allows bypassing the administrator to access the background upload interface, exploiting an upload parameter to bypass getimagesize and upload a PHP file, leading to getshell. This is what the provided docu...
CVE-2020-19672
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell...
CVE-2020-19672: Unrestricted Upload of File with Dangerous Type
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell...
Exploit for Use After Free in Microsoft
System-Vulnerability 实时更新较好用最新漏洞EXP，仅供已授权渗透测试使用 --- Windows --2019.9.20 CVE-2019-0708 Blue Keep Rce --2019.11.20 CVE-2019-1388 UAC 提权 --2020.3 CVE-2020-0796 - SMBv3 poc --2020.4 CVE-2020-0796 - SMBv3 提权 --2020.5 全版本窃取令牌提权 --2020.6 CVE-2020-0796 - SMBv3 getshell Linux --2019.11 CVE-2019-14287 sudo...
CVE-2015-4553
A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell...
CVE-2015-4553: Unrestricted Upload of File with Dangerous Type
A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell...
PT-2020-7848
Name of the Vulnerable Software and Affected Versions: DeDeCMS versions prior to 5.7-sp1 Description: A file upload issue exists, allowing malicious users to getshell. Recommendations: For DeDeCMS versions prior to 5.7-sp1, update to version 5.7-sp1 or later to resolve the issue...
Exploit for CVE-2018-2894
Ladon Scanner for Python !Authorhttps://img.shields.io/bad...
CVE-2019-1010152
zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80...