555 matches found
Exploit for Argument Injection in Phpmailer_Project Phpmailer
MediCare Portal Intentionally vulnerable healthcare patient...
CS-Cart-POC
CS-Cart RCE & LFI Exploit Developed by: Strikoder Tes...
cscart-rce-lfi-exploit
cscart-rce-lfi-exploit CS-Cart Authe...
EUVD-2021-1283
Malware in sbrugna...
EUVD-2020-0337
Malware in sbrugna...
EUVD-2020-0340
Malware in sbrugna...
EUVD-2010-4878
Malware in sbrugna...
EUVD-2020-0330
Malware in sbrugna...
EUVD-2017-16953
Malware in sbrugna...
EUVD-2020-0422
Malware in sbrugna...
EUVD-2021-1129
Malware in sbrugna...
EUVD-2021-1277
Malware in sbrugna...
EUVD-2020-0329
Malware in sbrugna...
EUVD-2024-0536
Malicious code in bioql PyPI...
EUVD-2022-7002
Malicious code in bioql PyPI...
Exploit for Argument Injection in Phpmailer_Project Phpmailer
PHPMailer And that's it, you have your shell. There is another exploit, which ilustrates another use case. ./deface.sh localhost:8080 + CVE-2016-10033 exploit by opsxcq + Exploiting localhost:8080 + Target exploited, acessing shell at http://localhost:8080/backdoor.php + Checking if the backdoor...
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2014-3931link is external Multi-Router Looking Glass MRLG Buffer Overflow Vulnerability CVE-2016-10033link is external PHPMailer Command Injection Vulnerabilit...
PHPMailer Command Injection Vulnerability
PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the 'mail' function of 'class.phpmailer.php' script. An attacker can exploit this issue to execute arbitrary code within the context of the application. Failed...
Linux Distros Unpatched Vulnerability : CVE-2021-3603
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called if such code is injected into the host project's scope by oth...
CVE-2024-5312 Cross-Site Scripting vulnerability in PHP Server Monitor
PHP Server Monitor, version 3.2.0, is vulnerable to an XSS via the /phpservermon-3.2.0/vendor/phpmailer/phpmailer/testscript/index.php page in all visible parameters. An attacker could create a specially crafted URL, send it to a victim and retrieve their session details...