CVE-2017-11610

CVE-2017-11610 RCE non autenticata con Reverse Shell per Supervisor 3.0a1 - 3.3.2 Exploit RCE non autenticato standalone in Python ≥3.6 per Supervisor dalla 3.0a1 alla 3.3.2, riscritto da questo modulo Metasploit. Post esplicativo qui. Testato con Python 3.7 su questo target che esegue Supervisor...

EUVD-2011-3559

Malware in sbrugna...

CVE-2025-9703 Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

CVE-2011-3600

The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figur...

Drupal Core XML-RPC Endpoint xmlrpc.php Tags Denial of Service (CVE-2014-5266)

A denial of service vulnerability has been reported in Drupal Core. The vulnerability can cause a very high CPU load and memory exhaustion. A remote unauthenticated attacker can exploit this vulnerability to cause a denial of service on the vulnerable system...