Command execution vulnerability in Pluck-CMS th***.php file

Pluck is a very simple and easy to use CMS Content Management System for PHP platforms. A command execution vulnerability exists in the Pluck-CMS th.php file, which can be exploited by an attacker to obtain application control privileges to get a webshell...

File upload vulnerability in the background of Guojiz Web Site Navigation System V2.3.5

Guojiz website navigation system is a navigation website source code developed by PHP+MySQL with MYSQL database. A file upload vulnerability exists in the backend of Guojiz URL Navigation System V2.3.5. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

SemCms foreign trade website PHP multilingual version v1.0.4 has file upload vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCms foreign trade website PHP multilingual version v1.0.4 file upload vulnerability. The...

Exploit for Cross-site Scripting in Dnnsoftware Dotnetnuke

CVE-2019-12562 !CVE-2019-12562https://mayaseven.com/wp-cont...

File Upload Vulnerability in Multimedia Management Platform of Beijing Tecbeth Technology Co.

Ltd. is a B2B e-commerce platform for digital products, pioneering the information service model. A file upload vulnerability exists in the multimedia management platform of Beijing Tekbest Technology Co. The vulnerability allows an attacker to upload a webshell and gain server privileges...

SecurityNotFound - 404 Page Not Found Webshell

Clone me! Clone or download the project: git clone https://github.com/CosasDePuma/SecurityNotFound.git SecurityNotFound cd SecurityNotFound "Installation" The src/404.php file should be located on the target server. That server must have the ability to execute .php files. Here is an example of so...

File upload vulnerability in ThinkCMF frontend Ue***.cl***.php file

ThinkCMF is a Chinese content management framework based on PHP+MYSQL. A file upload vulnerability exists in the ThinkCMF frontend Ue.cl.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in eyoucms Backend

Eyou Content Management System EyouCms belongs to Hainan Zanzan Network Technology Co., Ltd. is a domestic PHP open source website management system. Eyoucms backend file upload vulnerability, attackers can exploit the vulnerability to upload webshell, get server privileges...

Webshell Bypass Vulnerability in D-Shield

D Shield is a proactive defense protection software designed specifically for IIS. D Shield suffers from a webshell bypass vulnerability that can be exploited by attackers to bypass the interception of submission data...

CVE-2019-15813

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell...

CVE-2019-15813

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell...

Design/Logic Flaw

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell...

CVE-2019-15813

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell...

Sentrifugo 3.2 File Upload Restriction Bypass

Exploit Title: Sentrifugo 3.2 - File Upload Restriction Bypass Google Dork: N/A Date: 8/29/2019 Exploit Author: creosote Vendor Homepage: http://www.sentrifugo.com/ Version: 3.2 Tested on: Ubuntu 18.04 CVE : CVE-2019-15813 Multiple File Upload Restriction Bypass vulnerabilities were found in...

Sentrifugo 3.2 - File Upload Restriction Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Sentrifugo 3.2 - File Upload Restriction Bypass Exploit Author: creosote Vendor Homepage: http://www.sentrifugo.com/ Version: 3.2 Tested on: Ubuntu 18.04 CVE : CVE-2019-15813 Multiple File Upload Restriction Bypass vulnerabiliti...

Sentrifugo 3.2 - File Upload Restriction Bypass

Exploit Title: Sentrifugo 3.2 - File Upload Restriction Bypass Google Dork: N/A Date: 8/29/2019 Exploit Author: creosote Vendor Homepage: http://www.sentrifugo.com/ Version: 3.2 Tested on: Ubuntu 18.04 CVE : CVE-2019-15813 Multiple File Upload Restriction Bypass vulnerabilities were found in...

Sentrifugo 3.2 - File Upload Restriction Bypass

Sentrifugo 3.2 - File Upload Restriction Bypass Exploit Title: Sentrifugo 3.2 - File Upload Restriction Bypass Google Dork: N/A Date: 8/29/2019 Exploit Author: creosote Vendor Homepage: http://www.sentrifugo.com/ Version: 3.2 Tested on: Ubuntu 18.04 CVE : CVE-2019-15813 Multiple File Upload...

GAME OVER: Detecting and Stopping an APT41 Operation

In August 2019, FireEye released the “Double Dragon” report on our newest graduated threat group, APT41. A China-nexus dual espionage and financially-focused group, APT41 targets industries such as gaming, healthcare, high-tech, higher education, telecommunications, and travel services. APT41 is...

File Upload Vulnerability in Far Autumn Medical Training Enrollment System v1.0

Far Autumn Medical Online Examination System adopts the universal test bank management software, applicable to all levels and types of medical schools and hospitals, the content contains the three basic exams for medical and nursing personnel, title exams, licensing exams, academic exams, trainin...

Far Autumn Medical Training Enrollment System v1.0 File Upload Vulnerability in Frontend

Far Autumn Medical Online Examination System adopts the universal test bank management software, applicable to all levels and types of medical schools and hospitals, the content contains the three basic exams for medical and nursing personnel, title exams, licensing exams, academic exams, trainin...