ProcessMaker - Plugin Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ProcessMaker Plugin Upload', 'Description' = %q This module will generate and upload a plugin to ProcessMaker resulting in execution of PHP code a...

Piwik 2.14.0/2.16.0/2.17.1/3.0.1 - Superuser Plugin Upload (Metasploit)

This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/zip' class MetasploitModule 'Piwik Superuser Plugin Upload', 'Description' = %q This module will generate a plugin, pack the payload...

Piwik 2.14.0 / 2.16.0 / 2.17.1 / 3.0.1 - Superuser Plugin Upload Exploit

Exploit for php platform in category remote exploits This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/zip' class MetasploitModule 'Piwik Superuser Plugin Upload', 'Description' = %q...

ProcessMaker Plugin Upload

This module will generate and upload a plugin to ProcessMaker resulting in execution of PHP code as the web server user. Credentials for a valid user account with Administrator roles is required to run this module. This module has been tested successfully on ProcessMaker versions 1.6-4276, 2.0.23...

vuln in WordPress plugin Upload File(UP)

New Advisory: Wordpress Plugin Upload FileUP Remote SQL Injection --------------------Summary---------------- Software: Upload File WordPress Plugin Critical Level: Moderate Type: SQL Injection Class: Remote Status: Unpatched PoC/Exploit: Not Available Solution: Not Available Discovered by:...

CVE-2003-0372

CVE-2003-0372 affects Nessus prior to 2.0.6, specifically the libnasl component. The root cause is a signed integer handling issue that allows a local user with plugin upload privileges to trigger a denial of service (core dump) and potentially execute arbitrary code by providing a negative argum...

Nessus 2.0.x - LibNASL Arbitrary Code Execution

Nessus 2.0.x - LibNASL Arbitrary Code Execution source: https://www.securityfocus.com/bid/7664/info Nessus has reported that various flaws have been discovered in the 'libnasl' library used by the Nessus application. As a result, a malicious NASL script may be able to break outside of the...