19 matches found
PDF Phone-Home Full Suite
Generate the full KittySploit PDF phone-home suite 70 files with phone-home callbacks for upload-scanner and red-team validation. Covers URI actions, JavaScript, XFA, XXE, UNC/NTLM, and viewer-specific CVE PoCs. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.pdf import...
CVE-2025-50857: Improper Limitation of a Pathname to a Restricted Directory
ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload...
CVE-2025-67742: Improper Limitation of a Pathname to a Restricted Directory
In JetBrains TeamCity before 2025.11 path traversal was possible via file upload...
EUVD-2024-52933
Malicious code in bioql PyPI...
CVE-2024-56035
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kurt Payne Upload Scanner upload-scanner allows Reflected XSS.This issue affects Upload Scanner: from n/a through = 1.2...
CVE-2024-56035
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kurt Payne Upload Scanner upload-scanner allows Reflected XSS.This issue affects Upload Scanner: from n/a through = 1.2...
CVE-2024-56035 WordPress Upload Scanner plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kurt Payne Upload Scanner allows Reflected XSS.This issue affects Upload Scanner: from n/a through 1.2...
CVE-2024-56035
CVE-2024-56035 — The connected sources indicate an XSS vulnerability in the WordPress plugin Upload Scanner (CVE-2024-56035). The entry describes an improper neutralization of input during web page generation that allows Reflected XSS. Affected software: Upload Scanner, versions up to 1.2 (from n...
CVE-2024-56035 WordPress Upload Scanner plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kurt Payne Upload Scanner upload-scanner allows Reflected XSS.This issue affects Upload Scanner: from n/a through = 1.2...
CVE-2024-56035: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kurt Payne Upload Scanner upload-scanner allows Reflected XSS.This issue affects Upload Scanner: from n/a through = 1.2...
WordPress plugin Upload Scanner has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Upload Scanner plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Zlrqh Patchstack Alliance in WordPress Plugin Upload Scanner versions = 1.2...
Elementor Pro Plugin for WordPress < 2.9.4 Arbitrary File Upload
The WordPress Elementor Pro Plugin installed on the remote host is affected by an authenticated arbitrary file upload vulnerability that could lead to remote code execution. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported versio...
CVE-2014-3448: Unrestricted Upload of File with Dangerous Type
BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...
Coppermine < 1.4.20 'img_dir' Arbitrary File Upload
Binary data 4847.prm...
.xls File Upload Detection
Binary data 4019.prm...
FCKeditor with PHPNuke < 2.3 Beta upload.php Arbitrary File Upload
Binary data 3626.prm...