13283 matches found
CVE-2021-22886
CVE-2021-22886 affects Rocket.Chat prior to version 3.11, 3.10.5, 3.9.7, and 3.8.8. It enables persistent XSS via nested markdown tags that can inject JavaScript in messages, with impacts including arbitrary file read and RCE on the Rocket.Chat desktop app. Patches/updates have been released for ...
Another Critical RCE Flaw Discovered in SolarWinds Orion Platform
IT infrastructure management provider SolarWinds on Thursday released a new update to its Orion networking monitoring tool with fixes for four security vulnerabilities, counting two weaknesses that could be exploited by an authenticated attacker to achieve remote code execution RCE. Chief among...
WP-Curricul Vitea Free <= 6.3 - Unauthenticated Arbitrary File Upload to RCE
The plugin suffers from an arbitrary file upload issue in page where the formCadastro is embed. The form allows unauthenticated user to register and submit files for their profile picture as well as resume, without any file extension restriction, leading to RCE. PoC The PoC will be displayed once...
Easy Form Builder <= 1.0 - Authenticated Arbitrary File Upload
The EFBPverifyuploadfile AJAX action of the plugin, available to authenticated users, does not have any security in place to verify uploaded files, allowing low privilege users to upload arbitrary files, leading to RCE. PoC The PoC will be displayed once the issue has been remediated...
Remote Code Execution (RCE)
github.com/ipfs/go-ipfs is vulnerable to remote code execution. The vulnerability exists due to control characters not escaped from the console output...
Dolibarr ERP/CRM 11.0.4 - File Upload Restrictions Bypass Exploit
Exploit Title: Dolibarr ERP/CRM 11.0.4 - File Upload Restrictions Bypass Authenticated RCE Exploit Author: Andrea Gonzalez Vendor Homepage: https://www.dolibarr.org/ Software Link: https://github.com/Dolibarr/dolibarr Version: Prior to 11.0.5 Tested on: Debian 9.12 CVE : CVE-2020-14209...
Dolibarr ERP 11.0.4 - File Upload Restrictions Bypass (Authenticated RCE)
Exploit Title: Dolibarr ERP/CRM 11.0.4 - File Upload Restrictions Bypass Authenticated RCE Date: 16/06/2020 Exploit Author: Andrea Gonzalez Vendor Homepage: https://www.dolibarr.org/ Software Link: https://github.com/Dolibarr/dolibarr Version: Prior to 11.0.5 Tested on: Debian 9.12 CVE :...
Dolibarr ERP/CRM 11.0.4 Bypass / Code Execution
Exploit Title: Dolibarr ERP/CRM 11.0.4 - File Upload Restrictions Bypass Authenticated RCE Date: 16/06/2020 Exploit Author: Andrea Gonzalez Vendor Homepage: https://www.dolibarr.org/ Software Link: https://github.com/Dolibarr/dolibarr Version: Prior to 11.0.5 Tested on: Debian 9.12 CVE :...
F5 BIG-IP RCE (CVE-2021-22986)
Binary data f5cve-2021-22986.nbin...
EPrints Scholix Remote Code Execution
A remote code execution vulnerability exists in EPrints Scholix. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Attacks Spike Following The Disclosure Of CVE-2021-22986: F5 Networks BIG-IP iControl Remote Command Execution Vulnerability
On March 10th F5 published a security advisory containing twenty one CVEs, the most critical one CVE-2021-22986 can be exploited for unauthenticated remote code execution attacks. In the past week, several security researchers have reverse engineered the Java software patch published by BIG-IP an...
CVE-2021-26295 RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI
Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz...
MyBB 1.8.25 - Chained Remote Command Execution
Exploit Title: MyBB 1.8.25 - Chained Remote Command Execution Exploit Author: SivertPL [email protected] Date: 19.03.2021 Description: Nested autourl Stored XSS - templateset second order SQL Injection leading to RCE through improper string interpolation in eval. Software Link:...
Apache OFBiz RCE漏洞（CVE-2021-26295）
...
Security Update for .NET Core (March 2021)
The Microsoft .NET Core installation on the remote host is version 2.1.x prior to 2.1.26, 3.1.x prior to 3.1.13, or 5.x prior to 5.0.4. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute...
MariaDB RCE Vulnerability (MDEV-25179) - Linux
MariaDB is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; ...
MyBB 1.8.25 Remote Command Execution
Exploit Title: MyBB 1.8.25 - Chained Remote Command Execution Exploit Author: SivertPL [email protected] Date: 19.03.2021 Description: Nested autourl Stored XSS - templateset second order SQL Injection leading to RCE through improper string interpolation in eval. Software Link:...
Apache OFBiz RCE Vulnerability
Apache OFBiz is an e-commerce platform for building medium-sized and large enterprise-class, cross-platform, cross-database, cross-application server multi-tier, distributed e-commerce applications. An RCE vulnerability exists in Apache OFBiz. An unauthenticated attacker can exploit this...
MyBB 1.8.25 - Chained Remote Command Execution Exploit
Exploit Title: MyBB 1.8.25 - Chained Remote Command Execution Exploit Author: SivertPL email protected Description: Nested autourl Stored XSS - templateset second order SQL Injection leading to RCE through improper string interpolation in eval. Software Link:...