180 matches found
CVE-2018-18387
CVE-2018-18387 playSMS = 1.4.2 - Privilege escalation TMHC TEAM found a vulnerability that lead to a priviledge escalation through playSMS/web/init.php that can lead to a complete system compromise. The attacker need to get access on the box where playSMS is installed and be able to edit playSMS...
CVE-2017-9101
PlaySMS 1.4 authenticated RCE Simple method of performing remote code execution through the Phonebook CSV upload issue as described on ExploitDB. Either run a single command: root@kitploit: % python3 playsmshell.py --url http://localhost/playsms --password playwithsms -c 'id' Grabbing CSRF token...
CVE-2021-40373
CVE-playsms C'è una vulnerabilità in playsms 1.4.3 che consente a potenziali aggressori di eseguire codice in remoto. come riprodurre l'RCE shell: https://playsms.org/ docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms effettuare il login con admin:admin...
CVE-2020-8644-PlaySMS-1.4
CVE-2020-8644-PlaySMS-1.4 Script Python per sfruttare PlaySMS prima della versione 1.4.3 Esecuzione Apri una porta sulla tua macchina: Ed esegui exploit.py: root@kitploit: ./exploit.py Modifica dell'exploit Potresti voler cambiare la reverse shell creata da exploit.py Per farlo, puoi modificare l...
playSMS <1.4.3 - Remote Code Execution
PlaySMS before version 1.4.3 is susceptible to remote code execution because it double processes a server-side template. id: CVE-2020-8644 info: name: playSMS 1.4.3 - Remote Code Execution author: dbrwsky severity: critical description: PlaySMS before version 1.4.3 is susceptible to remote code...
EUVD-2008-5851
Malware in sbrugna...
EUVD-2004-2255
Malware in sbrugna...
EUVD-2018-10117
Malware in sbrugna...
EUVD-2020-7146
Malware in sbrugna...
EUVD-2009-0112
Malware in sbrugna...
EUVD-2005-4427
Malware in sbrugna...
EUVD-2024-49452
Malicious code in bioql PyPI...
EUVD-2024-47562
Malicious code in bioql PyPI...
EUVD-2024-47563
Malicious code in bioql PyPI...
EUVD-2024-46995
Malicious code in bioql PyPI...
EUVD-2024-47375
Malicious code in bioql PyPI...
EUVD-2022-49812
Malicious code in bioql PyPI...
MAL-2025-29390 Malicious code in playsms (npm)
The package playsms was found to contain malicious code...
Malicious code in playsms (npm)
The package playsms was found to contain malicious code...
CVE-2024-6251
A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main=featurephonebook=phonebooklist of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site scripting...