15204 matches found
Code Snippets Extended <= 1.4.7 - RCE via CSRF
The plugin could allow attackers to perform RCE by using a CSRF attack against a logged in admin...
Apache Struts Security Update (S2-062) - Active Check
Apache Struts is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-28590
CVE-2022-28590 affects Pixelimity 1.0. The vulnerability enables remote code execution via admin/admin-ajax.php?action=install_theme. Multiple sources describe an arbitrary file upload path that can lead to code execution, with public PoC showing webshell upload to facilitate further access. The ...
DotCMS RCE via Arbitrary File Upload.
When files are uploaded into dotCMS via the content API, but before they become content, dotCMS writes the file down in a temp directory. In the case of this vulnerability, dotCMS does not sanitize the filename passed in via the multipart request header and thus does not sanitize the temp file's...
CVE-2022-1273
The Import WP WordPress plugin before 2.4.6 does not validate the imported file in some cases, allowing high privilege users such as admin to upload arbitrary files such as PHP, leading to RCE...
Design/Logic Flaw
The Import WP WordPress plugin before 2.4.6 does not validate the imported file in some cases, allowing high privilege users such as admin to upload arbitrary files such as PHP, leading to RCE...
CVE-2022-1273
The CVE-2022-1273 entry concerns the WordPress Import WP plugin prior to version 2.4.6. The vulnerability: the plugin does not validate the imported file in certain scenarios, allowing high-privilege users (e.g., admins) to upload arbitrary files (including PHP), which can lead to remote code exe...
CVE-2022-1273 Import WP < 2.4.6 - Admin+ Arbitrary File Upload to RCE
The Import WP WordPress plugin before 2.4.6 does not validate the imported file in some cases, allowing high privilege users such as admin to upload arbitrary files such as PHP, leading to RCE...
CVE-2022-27982
RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain a remote code execution RCE vulnerability via the fileName parameter at /guestauth/cfg/upLoadCfg.php...
CVE-2022-27982
CVE-2022-27982 affects the RG-NBR-E Enterprise Gateway RG-NBR2100G-E. A remote code execution (RCE) vulnerability is exposed via the fileName parameter in /guest_auth/cfg/upLoadCfg.php. The NVD entry lists a high/critical impact in CVSS v2/v3 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base scores 7.5/...
WSO Arbitrary File Upload / Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WSO2 Arbitrary File Upload to RCE', 'Description' = %q This module abuses a vulnerability in certain WSO2 products that allow unrestricted file...
CVE-2022-29936
USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upload-big-file Java deserialization. NOTE: this is not an Oracle Corporation product...
The top 5 most routinely exploited vulnerabilities of 2021
A joint Cybersecurity Advisory, coauthored by cybersecurity authorities of the United States CISA, NSA, and FBI, Australia ACSC, Canada CCCS, New Zealand NZ NCSC, and the United Kingdom NCSC-UK has detailed the top 15 Common Vulnerabilities and Exposures CVEs routinely exploited by malicious cybe...
CVE-2022-27336
Seacms v11.6 is affected by a remote code execution (RCE) vulnerability in the /admin/weixin.php component. The provided documents confirm an RCE in Seacms 11.6 but do not supply exploited vectors, exact root cause details, or explicit patch/version remediation within the citations. CVSS metrics ...
CVE-2022-27336
Seacms v11.6 was discovered to contain a remote code execution RCE vulnerability via the component /admin/weixin.php...
Millions of Java Apps Remain Vulnerable to Log4Shell
Four months after the discovery of the zero-day Log4Shell critical flaw, millions of Java applications still remain vulnerable to compromise, researchers have found. Rezilion expected that due to the “massive amount of media coverage” the bug unsurprisingly received, the majority of applications...
Low: Red Hat Security Advisory: Red Hat AMQ Broker 7.8.6 release and security update
Red Hat AMQ Broker 7.8.6 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Prime95 30.7 Build 9 Buffer Overflow Exploit
Exploit Title: Prime95 Version 30.7 build 9 Buffer Overflow RCE Discovered by: Yehia Elghaly Vendor Homepage: https://www.mersenne.org/ Software Link : https://www.mersenne.org/ftproot/gimps/p95v307b9.win32.zip Tested Version: 30.7 build 9 Vulnerability Type: Buffer Overflow RCE Local Tested on O...
