ICS-MoxieManager-FileUpload-PoC

ICS-MoxieManager-RCE-CVE-2026-30-03 CVE-2026-30-03 9.8 Critical Possible RCE Jenzabar ICS + MoxieManager proof https://www.youtube.com/watch?v=lcfUL6Xx3f4&feature=youtu.be CVE CVSS Impact Affected CVE-2026-30-03 9.8 Critical Possible RCE Jenzabar ICS + MoxieManager A vulnerability in the...

EUVD-2019-2076

Malware in sbrugna...

EUVD-2025-14812

Malicious code in bioql PyPI...

CVE-2019-10012

Jenzabar JICS aka Internet Campus Solution before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager for .NET plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer...

CVE-2025-30091

In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.php, and InstallCommand is available...

CVE-2025-30091

In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.php, and InstallCommand is available...

CVE-2025-30091

CVE-2025-30091 affects Tiny MoxieManager PHP prior to 4.0.0. The vulnerability exists in the installer command (InstallCommand) where attacker‑controlled data can be written to config.php, allowing unauthenticated remote code execution after an installation has completed. Root cause is improper h...

CVE-2025-30091

In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.php, and InstallCommand is available...

CVE-2025-30091: Improper Neutralization of Directives in Statically Saved Code

In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.php, and InstallCommand is available...

PT-2025-12804

Name of the Vulnerable Software and Affected Versions MoxieManager PHP versions prior to 4.0.0 Description The issue allows unauthenticated attackers to inject and execute arbitrary code through the installer command. Attacker-controlled data to InstallCommand can be inserted into config.php, and...

Tiny MoxieManager security vulnerability

Tiny MoxieManager is an application from Tiny Inc. NET for managing all media files in PHP and . A security vulnerability exists in Tiny MoxieManager versions prior to 4.0.0 that stems from a remote code execution that can occur in the install command and allow an unauthenticated attacker to inje...

CVE-2025-30091

In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allows unauthenticated attackers to inject and execute arbitrary code. Attacker-controlled data to InstallCommand can be inserted into config.php, and InstallCommand is available...

CVE-2019-10012

Jenzabar JICS aka Internet Campus Solution before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager for .NET plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer...

CVE-2019-10012

Jenzabar JICS aka Internet Campus Solution before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager for .NET plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer...

Design/Logic Flaw

Jenzabar JICS aka Internet Campus Solution before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager for .NET plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer...

CVE-2019-10012

Jenzabar JICS aka Internet Campus Solution before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager for .NET plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer...

CVE-2019-10012: Unrestricted Upload of File with Dangerous Type

Jenzabar JICS aka Internet Campus Solution before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager for .NET plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer...

PT-2019-11284

Name of the Vulnerable Software and Affected Versions: Jenzabar JICS aka Internet Campus Solution versions prior to 9 Description: The issue allows remote attackers to upload and execute arbitrary .aspx code. This is achieved by placing the code in a ZIP archive and using the MoxieManager for .NE...