5389 matches found
FudgeC2 - A Collaborative C2 Framework For Purple-Teaming Written In Python3, Powershell And .NET
FudgeC2 is a campaign orientated Powershell C2 framework built on Python3/Flask - Designed for team collaboration, client interaction, campaign timelining, and usage visibility. Note: FudgeC2 is currently in alpha stage, and should be used with caution in non-test environments. Setup Installation...
CVE-2016-10985
The echosign plugin before 1.2 for WordPress has XSS via the templates/addtemplates.php id parameter...
CVE-2016-10985
The CVE-2016-10985 entry affects the WordPress EchoSign plugin (before 1.2). A reflected Cross-Site Scripting (XSS) vulnerability exists via the templates/add_templates.php id parameter. NVD records a CVSS v3.1 base score of 6.1 (NETWORK, LOW attack complexity, PR:N, UI:R, changed scope; Confiden...
Privilege Escalation
ASP.NET Core is vulnerable to privilege escalation. When an ASP.NET Core web application is created using vulnerable project templates, the application fails to properly sanitize web requests. An attacker is able to exploit the vulnerability by sending an email to the user containing a malicious...
CVE-2019-1302
An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'...
CVE-2019-1302
An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'...
ASP.NET Core Elevation Of Privilege Vulnerability
An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests. An attacker who successfully exploited this vulnerability could perform content injection attacks and run script in the security...
GitLab: Project Template functionality can be used to copy private project data, such as repository, confidential issues, snippets, and merge requests
I've found a three minor vulnerabilities which, when combined, allow an attacker to copy private repositories, confidential issues, private snippets, and then some. I'll go through the code path to explain the vulnerabilities and how they are combined. See the Proof of Concept section if you want...
[20190901] - Core - XSS in logo parameter of default templates
Inadequate escaping allowed XSS attacks using the logo parameter of the default templates...
Ansible: disclosure data when prompted for password and template characters are passed
A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...
Ansible: disclosure data when prompted for password and template characters are passed
A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...
UBUNTU-CVE-2019-13458
An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.8, and Community Edition 5.0.x through 5.0.36 and 6.0.x through 6.0.19. An attacker who is logged into OTRS as an agent user with appropriate permissions can leverage OTRS notification tags in templates in order to...
CVE-2019-13458
Removed by vendor...
WordPress Plugin Download Manager 2.5 - Cross-Site Request Forgery
Exploit Title: CSRF vulnerabilities in WordPress Download Manager Plugin 2.5 Google Dork: inurl:"/wp-content/plugins/download-manager Date: 24 may, 2019 Exploit Author: Princy Edward Exploit Author Blog : https://prinyedward.blogspot.com/ Vendor Homepage: https://www.wpdownloadmanager.com/ Softwa...
Remote Code Execution (RCE)
magento/community-edition is vulnerable to remote code execution RCE. The vulnerability exists as a user with admin privileges to email templates can execute arbitrary code by previewing a malicious template...
Cross-site Scripting (XSS)
magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists as users with privileges to email templates can cause XSS attacks...
Unspecified vulnerability in cPanel (CNVD-2019-27410)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 58.0.4. An attacker can exploit the vulnerability to perform...
PT-2019-13346 · Otrs +2 · Otrs +2
Name of the Vulnerable Software and Affected Versions: Open Ticket Request System OTRS versions 7.0.x through 7.0.8 Open Ticket Request System OTRS Community Edition versions 5.0.x through 5.0.36 Open Ticket Request System OTRS Community Edition versions 6.0.x through 6.0.19 Description: An issue...