CVE-2023-35813-PoC

Sitecore 远程代码执行漏洞 CVE: 2023-35813（由 @mwulftange 发现） CVSS 分数：9.8 严重程度：严重 这是发现该漏洞的研究人员发布的一篇精彩博文： https://code-white.com/blog/exploiting-asp.net-templateparser-part-1/ 确定你想要使用的命令，并将其放入名为 command.txt 的文件中， 然后运行 command.py 对其进行编码。 编码后，运行 exploit.py 脚本，并将目标主机名作为参数传入。...

Exploit for Code Injection in Sitecore Experience_Commerce

Sitecore Remote Code Execution Vulnerability CVE: 2023-35813 d...

Mars: CVE-█████-35813 in █████

A critical remote code execution vulnerability CVE-█████-35813 affecting multiple Sitecore products through version 10.3 was discovered. The vulnerability was exploited through the sitecorexaml.ashx endpoint using ASP.NET TemplateParser injection, allowing attackers to execute arbitrary code. The...

PT-2023-3930 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is...

PT-2023-25331

Name of the Vulnerable Software and Affected Versions Sitecore Experience Manager versions through 10.3 Sitecore Experience Platform versions through 10.3 Sitecore Experience Commerce versions through 10.3 Description Multiple Sitecore products are affected by a remote code execution issue. This...

ZPanel - templateparser.class.php Crafted Template Remote Command Execution

ZPanel - templateparser.class.php Crafted Template Remote Command Execution Hi all, There's an arbitrary PHP code execution in ZPanel, a free and open-source shared hosting control panel. Using the included zsudo binary, access can be escalated and commands can be run as root. The vulnerability:...