19447 matches found
CVE-2023-3452-PoC
CVE-2023-3452-PoC - Wordpress Plugin Canto 3.0.5 - Remote File Inclusion RFI - Remote Code Execution RCE - Unauthenticated Here we explain a PoC of the latest RFI Remote File Inclusion vulnerability of the Canto Wordpress Pluging, and we have developed an exploit to automate the execution of...
CVE-2007-3831
CVE-2007-3831 PHP रिमोट फ़ाइल इन्क्लूज़न main.php में ISS Proventia Network IPS GX5108 1.3 और GX5008 1.5 में Exploit-db प्रकाशन https://www.exploit-db.com/exploits/30290/ Exploit-db पेपर : https://www.exploit-db.com/docs/english/13081-having-fun-with-proventia-gx5108-&-gx5008-insecurities.pdf Git...
CVE-2019-9978
CVE-2019-9978 CVE-2019-9978 - PoC RCE in Social WarFare Plugin system'cat /etc/passwd' Save it with filename: payload.txt and upload it on a server. The URI should look like: https://yoursite.com/payload.txt. Finally, supply your --target and --payload-uri options: root@kitploit: $ python...
CVE-2022-39838
CVE-2022-39838 सुझाया गया विवरण Systematica FIX Adapter ALFAFX 2.4.0.25 13/09/2017 एक UNC शेयर पथनाम के माध्यम से दूरस्थ फ़ाइल समावेशन की अनुमति देता है, और स्थानीय पथनामों तक पूर्ण पथ ट्रैवर्सल की भी अनुमति देता है। अतिरिक्त जानकारी PoC:...
CVE-2009-4623
CVE-2009-4623 Advanced Comment System 1.0 Reverse Shell Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the ACSpath parameter to 1 index.php and 2 admin.php in advancedcommentsystem/. NOTE: this...
Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion
A PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites comjoomla-visites component 1.1 RC2 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. id: CVE-2010-2918 info: name: Joomla! Component Visit...
BJ Lazy Load (Timthumb) <= 0.7.5 - Remote File Inclusion
The BJ Lazy Load plugin v0.7.5 for WordPress has a Remote File Inclusion vulnerability via TimThumb. id: CVE-2015-9415 info: name: BJ Lazy Load Timthumb = 0.7.5 - Remote File Inclusion author: s4e-io severity: high description: | The BJ Lazy Load plugin v0.7.5 for WordPress has a Remote File...
Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery
Onair2 3.9.9.2 and KenthaRadio 2.0.2 have exposed proxy functionality to unauthenticated users. Sending requests to this proxy functionality will have the web server fetch and display the content from any URI, allowing remote file inclusion and server-side request forgery. id: CVE-2021-24472 info...
Netmask NPM Package - Server-Side Request Forgery
Netmask NPM Package is susceptible to server-side request forgery because of improper input validation of octal strings in netmask npm package. This allows unauthenticated remote attackers to perform indeterminate SSRF, remote file inclusion, and local file inclusion attacks on many of the...
WordPress Canto Plugin <= 3.0.4 - File Inclusion
Canto plugin for WordPress up to version 3.0.4 contains a remote file inclusion caused by the 'wpabspath' parameter, letting unauthenticated attackers include and execute arbitrary remote code if allowurlinclude is enabled, exploit requires allowurlinclude to be enabled. id: CVE-2023-3452 info:...
74CMS - Remote File Inclusion
PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution. id: CVE-2020-29279 info: name: 74CMS - Remote File Inclusion author: DhiyaneshDK severity: critical description: | PHP remote file...
KR-Web <=1.1b2 - Remote File Inclusion
KR-Web 1.1b2 and prior contain a remote file inclusion vulnerability via adm/krgourl.php, which allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter. id: CVE-2009-4223 info: name: KR-Web =1.1b2 - Remote File Inclusion author: geeknik severity: high...
CVE-2023-3452---WordPress-Canto-Plugin-RCE
CVE-2023-3452 - वर्डप्रेस कैंटो प्लगइन आरसीई वर्डप्रेस कैंटो प्लगइन ≤ 3.0.4 RFI कमजोरी के लिए शोषण। वास्तव में HTTPS पर काम करता है — अन्य सार्वजनिक PoCs ने SSL पर हार मान ली थी। जहां श्रेय देना उचित है: यह CVE दूसरों द्वारा पाया गया। मैंने सिर्फ एक संस्करण बनाया जो HTTPS लक्ष्यों पर काम करता है।...
SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery
SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...
Metasploit-Wordpress-Canto-Exploit-RCE
Metersploit exploit module canto RCE CVE-2024-25096 & CVE-2023-3452 This exploit is a proof-of-work exploit of the RFI vulnerabilities CVE-2024-25096 and CVE-2023-3452, which allow the attacker to establish an interactive remote shell session on the target. CVE-2024-25096 abuses the abspath...
exploit-CVE-2015-8351
Gwolle Guestbook WordPress Plugin RFI Exploit This Python script exploits a critical Remote File Inclusion RFI vulnerability in the Gwolle Guestbook WordPress Plugin, which can be exploited by a non-authenticated attacker to include a remote PHP file and execute arbitrary code on the vulnerable...
CVE-2019-9978-RCE-PoC
CVE-2019-9978 RCE PoC – Social Warfare WordPress प्लगइन शोषण अनधिकृत रिमोट फ़ाइल समावेशन RFI से रिमोट कोड निष्पादन RCE 📌 विवरण यह रिपॉजिटरी CVE-2019-9978 के शोषण को प्रदर्शित करने वाला एक पायथन-आधारित प्रूफ ऑफ कॉन्सेप्ट PoC है, जो Social Warfare WordPress प्लगइन में एक गंभीर कमजोरी है। यह कमजोरी ...
CVE-2024-20405
विवरण सिस्को फिनेस के वेब-आधारित प्रबंधन इंटरफेस में एक कमजोरी एक अनप्रमाणित, दूरस्थ हमलावर को RFI कमजोरी का शोषण करके संग्रहीत XSS हमला करने की अनुमति दे सकती है। यह कमजोरी प्रभावित उपकरण पर भेजे गए विशिष्ट HTTP अनुरोधों के लिए उपयोगकर्ता द्वारा प्रदत्त इनपुट के अपर्याप्त सत्यापन के कारण होती है...
Vuln_Remediation_MegaQuagga
VulnRemediationMegaQuagga Remediation report for MegaQuagga Publishing validating the mitigation of CVE-2019-9978 through progressive defensive layering. Documents reverse proxy insertion, ModSecurity WAF deployment, Graylog SIEM integration, and SSL/TLS enforcement using multi-stage Wireshark PC...
