CVE-2017-11610

CVE-2017-11610 Supervisor 3.0a1 - 3.3.2 未认证反向Shell RCE 独立的 Python ≥3.6 未认证 RCE 利用，针对 Supervisor 3.0a1 至 3.3.2，从 Metasploit 模块 重写而来。解释性 文章在此。 在 此目标 上使用 Python 3.7 测试，运行 Supervisor 3.3.2 使用方法： root@kitploit: root@Kali:/Infosec/RubyStuff/Supervisor-3.3.2 ./exploit.py -h usage: exploit.py -h -rhost...

EUVD-2011-3559

Malware in sbrugna...

CVE-2025-9703 Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

CVE-2011-3600

The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figur...

Drupal Core XML-RPC Endpoint xmlrpc.php Tags Denial of Service (CVE-2014-5266)

A denial of service vulnerability has been reported in Drupal Core. The vulnerability can cause a very high CPU load and memory exhaustion. A remote unauthenticated attacker can exploit this vulnerability to cause a denial of service on the vulnerable system...