Lucene search
+L

16 matches found

Kitploit
Kitploit
•added 2026/09/24 5:54 p.m.•14 views

ICS-MoxieManager-FileUpload-PoC

ICS-MoxieManager-RCE-CVE-2026-30-03 CVE-2026-30-03 9.8 Crítico Posible RCE Jenzabar ICS + MoxieManager proff https://www.youtube.com/watch?v=lcfUL6Xx3f4&feature=youtu.be CVE CVSS Impacto Afetado CVE-2026-30-03 9.8 Crítico Posible RCE Jenzabar ICS + MoxieManager Una vulnerabilidad en el componente...

5.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2019-2076

Malware in sbrugna...

7.5CVSS7.5AI score0.01592EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-14812

Malicious code in bioql PyPI...

9.4CVSS6.6AI score0.00787EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 7:17 a.m.•17 views

CVE-2019-10012

Jenzabar JICS aka Internet Campus Solution before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager for .NET plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer...

7.5CVSS7.9AI score0.01592EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/27 12:17 a.m.•35 views

CVE-2025-30091

In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.php, and InstallCommand is available...

9.4CVSS8.8AI score0.00787EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/25 2:15 p.m.•22 views

CVE-2025-30091

In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.php, and InstallCommand is available...

9.4CVSS0.00787EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/25 12:00 a.m.•31 views

CVE-2025-30091

In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.php, and InstallCommand is available...

9.4CVSS0.00787EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/25 12:00 a.m.•1 views

CVE-2025-30091: Improper Neutralization of Directives in Statically Saved Code

In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.php, and InstallCommand is available...

9.4CVSS6.9AI score0.00787EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/25 12:00 a.m.•11 views

Tiny MoxieManager 安全漏洞

Tiny MoxieManager is an application from Tiny Inc. NET for managing all media files in PHP and . A security vulnerability exists in Tiny MoxieManager versions prior to 4.0.0 that stems from a remote code execution that can occur in the install command and allow an unauthenticated attacker to inje...

9.4CVSS8.5AI score0.00787EPSS
SaveExploits0References4
CVE
CVE
•added 2025/03/25 12:00 a.m.•117 views

CVE-2025-30091

CVE-2025-30091 affects Tiny MoxieManager PHP prior to 4.0.0. The vulnerability exists in the installer command (InstallCommand) where attacker‑controlled data can be written to config.php, allowing unauthenticated remote code execution after an installation has completed. Root cause is improper h...

9.4CVSS8.7AI score0.00787EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/25 12:00 a.m.•10 views

CVE-2025-30091

In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.php, and InstallCommand is available...

9.4CVSS8.7AI score0.00787EPSS
SaveExploits0References2
OSV
OSV
•added 2019/03/25 7:29 p.m.•18 views

CVE-2019-10012

Jenzabar JICS aka Internet Campus Solution before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager for .NET plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer...

7.5CVSS6AI score0.01592EPSS
SaveExploits1References2
NVD
NVD
•added 2019/03/25 7:29 p.m.•28 views

CVE-2019-10012

Jenzabar JICS aka Internet Campus Solution before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager for .NET plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer...

7.5CVSS7.8AI score0.01592EPSS
SaveExploits1References2
Prion
Prion
•added 2019/03/25 7:29 p.m.•25 views

Design/Logic Flaw

Jenzabar JICS aka Internet Campus Solution before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager for .NET plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer...

6CVSS7.9AI score0.01592EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
•added 2019/03/25 6:07 p.m.•36 views

CVE-2019-10012

Jenzabar JICS aka Internet Campus Solution before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager for .NET plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer...

7.8AI score0.01592EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/25 12:00 a.m.•6 views

CVE-2019-10012: Unrestricted Upload of File with Dangerous Type

Jenzabar JICS aka Internet Campus Solution before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager for .NET plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer...

7.5CVSS6.2AI score0.01592EPSS
SaveExploits1References2
Rows per page
Query Builder