CVE-2019-15107

Exploit de Webmin CVE-2019-15107 CVE-2019-15107 Se descubrió un problema en Webmin =1.920. El parámetro old en passwordchange.cgi contiene una vulnerabilidad de inyección de comandos. NVD Compilación root@kitploit: $ git clone https://github.com/whokilleddb/CVE-2019-15107 $ cd CVE-2019-15107 $ ma...

CVE-2019-15107-EXPLOIT

CVE-2019-15107 - Webmin RCE 💻🛑 The vulnerability is found in the 'old' parameter within the 'passwordchange.cgi' file of Webmin. It is prone to command injection attacks, allowing malicious actors to execute arbitrary commands by exploiting this weakness in the application. 🚨 Disclaimer Please be...

CVE-2026-14372 Bit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameter

The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteFiles function in all versions up to, and including, 3.1.1 This makes it possible for...

CVE-2026-14372

The Bit Form WordPress plugin (Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder) is affected up to version 3.1.1 due to insufficient file path validation in deleteFiles, enabling authenticated users with subscriber+ to delete arbitrary server files (poten...