4360 matches found
WPintel
Características • Instalación • Uso • Licencia • Descargar Demostración en video Características Detectar versión de WordPress Detectar vulnerabilidades de versión Enumerar usuarios Detectar temas Detectar plugins Encontrar divulgación de ruta completa Verificar estado de registro de usuario...
Langflow < 1.9.1 - Unauthenticated File Upload
Langflow 1.9.1 contains an unrestricted file upload caused by lack of upload limitations, letting unauthenticated attackers exhaust server space and leak absolute file paths, exploit requires network access. id: CVE-2026-55450 info: name: Langflow 1.9.1 - Unauthenticated File Upload author: xtr0n...
CouchCMS <= 2.0 - Path Disclosure
CouchCMS = 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php. id: CVE-2018-7662 info: name: CouchCMS = 2.0 - Path Disclosure author: ritikchaddha severity: medium description: CouchCMS = 2.0 allows...
Drupal 11.x-dev - Full Path Disclosure
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. id: CVE-2024-45440 info: name: Drupal 11.x-dev - Full Path Disclosure author: DhiyaneshDK severity: medium description: |...
CirCarLife <4.3 - Improper Authentication
CirCarLife before 4.3 is susceptible to improper authentication. An internal installation path disclosure exists due to the lack of authentication for /html/repository.System. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16668 inf...
emlog 5.3.1 Path Disclosure
emlog v5.3.1 is susceptible to full path disclosure via t/index.php, which allows an attacker to see the path to the webroot/file. id: CVE-2021-3293 info: name: emlog 5.3.1 Path Disclosure author: h1ei1 severity: medium description: emlog v5.3.1 is susceptible to full path disclosure via...
WP Popups - Information Disclosure
WP Popups - WordPress Popup builder plugin for WordPress contains a full path disclosure caused by using mobiledetect without access restrictions, letting unauthenticated attackers retrieve server paths, exploit requires no specific conditions. id: CVE-2024-6555 info: name: WP Popups - Informatio...
Campaign Monitor for WordPress - Information Disclosure
Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a full path disclosure caused by improper access restriction and enabled displayerrors in /forms/views/admin/create.php, letting unauthenticated attackers retrieve server paths, exploit requires displayerrors to be...
DedeCMS 5.7 - Path Disclosure
DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/incarchivesfunctions.php id: CVE-2018-6910 info: name: DedeCMS 5.7 - Path Disclosure author: pikpikcu severity: high description: DedeCMS 5.7 allows remote attackers to discover t...
CVE-2024-5735
CVE-2024-5735 AdmirorFrames Joomla! Extension params'templatesBASE' = JPATHBASE . DIRECTORYSEPARATOR . 'plugins' . DIRECTORYSEPARATOR . 'content' . $path . 'templates' . DIRECTORYSEPARATOR;...
wphunter
WPHunter 工具 ☣ WPHunter 是一款 WordPress 漏洞扫描器 您可以在自己的 WordPress 网站上使用此工具，通过查找漏洞来检查网站的安全性。 超过 7500 万个网站运行在 WordPress 上，如今它支撑着 26% 的 Web 内容。令人惊讶的是，每天有成千上万的 WP 网站存在漏洞并被黑客入侵。您可能会丢失所有数据，损失数千美元，更糟糕的是，攻击者可能利用您的 WordPress 来攻击您的访客。机器人会自动扫描网络寻找弱网站并快速入侵。如果您的 WordPress 存在漏洞，那么遇到麻烦只是时间问题。因此，您应该尽快开始检查自己的 WordPres...
CVE-2001-0934
CVE-2001-0934 Cooolsoft PowerFTP Server 2.03 允许远程攻击者通过 pwd 命令获取服务器根目录的物理路径，该命令会列出完整路径名。 Securiteam 发布在 http://www.securiteam.com/exploits/6D00L2A35K.html 外部信息在 https://marc.info/?l=bugtraq&m=100698397818175&w=2 Cisco 参考在 https://tools.cisco.com/security/center/viewAlert.x?alertId=2884 作者 Alex...
CVE-2024-45440
CVE-2024-45440 Drupal CVE-2024-45440 core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. 使用 root@kitploit: python CVE-2024-45440.py 靶场部署 settings.php将通过挂载的方式替换掉容器中的settings.php...
CVE-2024-45440
Herramienta de enumeración para CVE-2024-45440 por DividesByZer0 & c0d3Ninja CVE-2024-45440 - PoC de Divulgación de Ruta Completa en Drupal 11.x-dev opciones: -h, --help muestra este mensaje de ayuda y sale -u URL, --url URL URL única para escanear. -f FILE, --file FILE Archivo que contiene URLs...
CVE-2026-37069
CVE-2026-37069 Divulgación de Ruta Absoluta en /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php en Veno File Manager Project 4.4.9 permite a un atacante no autenticado conocer en qué directorio del sistema se está ejecutando el código de la aplicación enviando una petició...
CVE-2026-89248
AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) is affected by an information disclosure in the WebRTC plugin file plugin/WebRTC/status.json.php. The endpoint performs no authentication or authorization check (no User::isLogged(), User::isAdmin(), or forbiddenPage()), allowing an...
CVE-2025-6082
CVE-2025-6082 全路径泄露 PoC 作者 : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 漏洞 : 全路径泄露 CWE-200 描述 本概念验证利用 Birth Chart Compatibility WordPress 插件（版本 ≤ 2.0）中的全路径泄露漏洞。PoC 向插件的 index.php 端点发送 HTTP GET 请求，捕获任何 PHP 警告或致命错误，并解析出服务器的文件系统路径（例如 /var/www/html/wp-content/plugins/... 或...
CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure
CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - 安全公告 06 - 25/02/05 程序：phpBB 2.0.12 主页：http://www.phpbb.com 受影响版本：phpBB 2.0.12 及更低版本 风险：低风险!! 影响：完整路径泄露 root@kitploit: -==phpBB 2.0.12 完整路径泄露==- 描述 phpBB 是一个高性能、完全可扩展且高度可定制的开源论坛软件包。phpBB...
AWStats <= 7.5 - Full Path Disclosure
AWStats 7.6 contains a full path disclosure caused by improper handling of framename and update parameters in awstats.pl, letting remote attackers determine server file paths, exploit requires sending crafted parameters. id: CVE-2018-10245 info: name: AWStats = 7.5 - Full Path Disclosure author:...
