30 matches found
📄 SofaWiki 3.9.2 Shell Upload
This is a proof of concept remote shell upload exploit for SofaWiki version 3.9.2 that leverages an issue originally discovered in 2024. ============================================================================================================================================= | Title : SofaWiki...
SofaWiki 3.9.2 Shell Upload
This is a proof of concept remote shell upload exploit for SofaWiki version 3.9.2 that leverages an issue originally discovered in 2024...
CVE-2023-29721
SofaWiki = 3.8.9 has a file upload vulnerability that leads to command execution...
EUVD-2023-33258
Malicious code in bioql PyPI...
EUVD-2023-33259
Malicious code in bioql PyPI...
CVE-2023-29720
SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...
SofaWiki 3.9.2 Cross Site Scripting Vulnerability
Exploit Title: SofaWiki 3.9.2 - Stored XSS Authenticated Exploit Author: Chokri Hammedi Vendor Homepage: https://www.sofawiki.com Software Link: https://www.sofawiki.com/site/files/snapshot.zip Version: 3.9.2 Tested on: Windows XP Summary: A stored XSS exists in SofaWiki's Open Ticket feature. An...
SofaWiki 3.9.2 Shell Upload Exploit
Exploit Title: SofaWiki 3.9.2 - Remote Code Execution RCE via Open Ticket File Upload Exploit Author: Chokri Hammedi Vendor Homepage: https://www.sofawiki.com Software Link: https://www.sofawiki.com/site/files/snapshot.zip Version: 3.9.2 Tested on: Windows XP Summary: A remote code execution RCE...
SofaWiki 3.9.2 Shell Upload
Exploit Title: SofaWiki 3.9.2 - Remote Code Execution RCE via Open Ticket File Upload Date: 10/17/2024 Exploit Author: Chokri Hammedi Vendor Homepage: https://www.sofawiki.com Software Link: https://www.sofawiki.com/site/files/snapshot.zip Version: 3.9.2 Tested on: Windows XP Summary: A remote co...
SofaWiki 3.9.2 Cross Site Scripting
Exploit Title: SofaWiki 3.9.2 - Reflected XSS Authenticated via Regex Replace Preview Date: 10/17/2024 Exploit Author: Chokri Hammedi Vendor Homepage: https://www.sofawiki.com Software Link: https://www.sofawiki.com/site/files/snapshot.zip Version: 3.9.2 Tested on: Windows XP Summary: A reflected...
SofaWiki 3.9.2 Cross Site Scripting
Exploit Title: SofaWiki 3.9.2 - Stored XSS Authenticated Date: 10/17/2024 Exploit Author: Chokri Hammedi Vendor Homepage: https://www.sofawiki.com Software Link: https://www.sofawiki.com/site/files/snapshot.zip Version: 3.9.2 Tested on: Windows XP Summary: A stored XSS exists in SofaWiki's Open...
SofaWiki 3.9.2 Shell Upload
Exploit Title: SofaWiki 3.9.2 - Remote Command Execution RCE Authenticated Discovered by: Ahmet Ümit BAYRAM Discovered Date: 18.04.2024 Vendor Homepage: https://www.sofawiki.com Software Link: https://www.sofawiki.com/site/files/snapshot.zip Tested Version: v3.9.2 latest Tested on: MacOS import...
SofaWiki 3.9.2 - Remote Command Execution (Authenticated) Exploit
Exploit Title: SofaWiki 3.9.2 - Remote Command Execution RCE Authenticated Discovered by: Ahmet Ümit BAYRAM Vendor Homepage: https://www.sofawiki.com Software Link: https://www.sofawiki.com/site/files/snapshot.zip Tested Version: v3.9.2 latest Tested on: MacOS import requests import random import...
SofaWiki 3.9.2 - Remote Command Execution (RCE) (Authenticated)
Exploit Title: SofaWiki 3.9.2 - Remote Command Execution RCE Authenticated Discovered by: Ahmet Ümit BAYRAM Discovered Date: 18.04.2024 Vendor Homepage: https://www.sofawiki.com Software Link: https://www.sofawiki.com/site/files/snapshot.zip Tested Version: v3.9.2 latest Tested on: MacOS import...
CVE-2023-29721
SofaWiki = 3.8.9 has a file upload vulnerability that leads to command execution...
CVE-2023-29721
SofaWiki = 3.8.9 has a file upload vulnerability that leads to command execution...
Privilege escalation
SofaWiki = 3.8.9 has a file upload vulnerability that leads to command execution...
PT-2023-22373 · Sofawiki · Sofawiki
Name of the Vulnerable Software and Affected Versions: SofaWiki versions prior to 3.8.9 Description: The issue is related to a file upload vulnerability that can lead to command execution. Recommendations: For versions prior to 3.8.9, update to version 3.8.9 or later to resolve the issue...
CVE-2023-29721
SofaWiki = 3.8.9 has a file upload vulnerability that leads to command execution...
CVE-2023-29721
CVE-2023-29721 affects SofaWiki versions up to 3.8.9. A file-upload vulnerability allows command execution, per multiple connected records (e.g., Red Hat, NVD, CNNVD). The CVSS indicates critical impact with network attack vector and no user interaction required. Remediation guidance found in PT-...