CVE-2020-20951

Pluck 4.7.10-dev2 is affected by a remote command execution vulnerability in the admin background during file uploads. The issue is documented across multiple sources (e.g., PT-2021-10562) without specific CVE root-cause details in the connected set, and no official patch version is provided in t...

PT-2021-10562 · Pluck · Pluck

Name of the Vulnerable Software and Affected Versions: Pluck version 4.7.10-dev2 Description: A remote command execution issue exists in the admin background when uploading files. Recommendations: For Pluck version 4.7.10-dev2, as a temporary workaround, consider restricting file uploads in the...

Backdoor.Win32.Delf.aez Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/be4a6274679ca966a1d99140db54c25a.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Delf.aez Vulnerability: Unauthenticated Remote Command Execution Description: The...

LibreOffice 安全特征问题特征问题漏洞

LibreOffice is an open source office software suite from The Document Foundation tdf. The product includes the Writer text documents, Calc spreadsheets, and Impress presentations applications. LibreOffice suffers from a security signature issue vulnerability that arises from incorrect input...

Pluck 命令注入漏洞

Pluck is a content management system CMS developed using the PHP language. A security vulnerability exists in Pluck-4.7.10-dev2, which originates from the admin background, and a remote command execution vulnerability exists when uploading files...

HashiCorp Nomad Remote Command Execution

Create a batch job on HashiCorp's Nomad service to spawn a shell. The default option is to use the 'rawexec' driver, which runs with high privileges. Development servers and client's explicitly enabling the 'rawexec' plugin can spawn these type of jobs. Regular 'exec' jobs can be created in a...

XStream远程代码执行漏洞（CVE-2021-29505）

CVE-2021-29505 Vulnerability CVE-2021-29505: XStream is vulnerable to a Remote Command Execution attack. Affected Versions All versions until and including version 1.4.16 are affected, if using the version out of the box. No user is affected, who followed the recommendation to setup XStream's...

YFCMF Remote Command Execution Vulnerability

YFCMF is Hunan Renren Technology Co., Ltd. developed a set of back-end content management framework based on ThinkPHP5.1. + foreign ACE1.40 UI template. A remote command execution vulnerability exists in YFCMF v2.3.1. An attacker can exploit this vulnerability by sending a constructed POST messag...

CVE-2020-23691

YFCMF v2.3.1 has a Remote Command Execution RCE vulnerability in the index.php...

CVE-2020-23691

YFCMF v2.3.1 has a Remote Command Execution RCE vulnerability in the index.php...

Command injection

YFCMF v2.3.1 has a Remote Command Execution RCE vulnerability in the index.php...

CVE-2020-23691

CVE-2020-23691 affects YFCMF v2.3.1. Multiple connected sources describe a Remote Command Execution (RCE) vulnerability in the package’s index.php. The underlying issue enables an attacker to craft a POST request to index.php to execute system commands on the hosting environment. Reported in vari...

CVE-2020-23691

YFCMF v2.3.1 has a Remote Command Execution RCE vulnerability in the index.php...

YFCMF 安全漏洞

YFCMF is Hunan Renren Technology Co., Ltd. developed a set of back-end content management framework based on ThinkPHP5.1. + foreign ACE1.40 UI template. A remote command execution vulnerability exists in YFCMF v2.3.1. An attacker can exploit this vulnerability by sending a constructed POST messag...

nippon-antenna RFNTPS 操作系统命令注入漏洞

The nippon-antenna RFNTPS is an application system from the Japanese company nippon-antenna. A ground receiving NTP server. RFNTPS suffers from an operating system command injection vulnerability. The vulnerability, which arises from improper handling of input validation by the program, could all...

ZeroShell 3.9.0 - Remote Command Execution Exploit

Exploit Title: ZeroShell 3.9.0 - Remote Command Execution Exploit Author: Fellipe Oliveira Vendor Homepage: https://zeroshell.org/ Software Link: https://zeroshell.org/download/ Version: 3.9.0 Tested on: ZeroShell 3.9.0 CVE : CVE-2019-12725 !/usr/bin/python3 import requests import optparse import...

ZeroShell 3.9.0 - Remote Command Execution

Exploit Title: ZeroShell 3.9.0 - Remote Command Execution Date: 10/05/2021 Exploit Author: Fellipe Oliveira Vendor Homepage: https://zeroshell.org/ Software Link: https://zeroshell.org/download/ Version: 3.9.0 Tested on: ZeroShell 3.9.0 CVE : CVE-2019-12725 !/usr/bin/python3 import requests impor...

ZeroShell 3.9.0 Remote Command Execution

Exploit Title: ZeroShell 3.9.0 - Remote Command Execution Google Dork: N/A Date: 10/05/2021 Exploit Author: Fellipe Oliveira Vendor Homepage: https://zeroshell.org/ Software Link: https://zeroshell.org/download/ Version: 3.9.0 Tested on: ZeroShell 3.9.0 CVE : CVE-2019-12725 !/usr/bin/python3 impo...

CVE-2021-32605

zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing them in the keys parameter of a ?location=search URI, as demonstrated by an OS command within an "if" "end if" block...

CVE-2021-32605

zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing them in the keys parameter of a ?location=search URI, as demonstrated by an OS command within an "if" "end if" block...