CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

299 matches found

Kitploit•added 2026/09/21 4:29 a.m.•7 views

CVE-2021-42171

CVE-2021-42171 File upload to Remote Code Execution on Zenario CMS 9.0.54156 https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74 root@kitploit: Server test Distributor ID: Ubuntu Description: Ubuntu 21.04 Release: 21.04 Codename: hirsute...

7.2CVSS7.3AI score0.02523EPSS

SaveExploits5

Kitploit•added 2026/09/20 10:47 p.m.•10 views

CVE-2022-41840-PoC

Zenario CMS 9.3 - 인증되지 않은 RCE 익스플로잇 CVE-2022-41840 Zenario CMS 버전 9.3 및 이전 버전에 영향을 미치는 인증되지 않은 원격 코드 실행RCE 취약점입니다. 이 익스플로잇은 AJAX 엔드포인트의 파일 업로드 취약점을 이용하여 PHP 웹쉘을 업로드하고 코드 실행을 달성합니다. 취약점 상세 CVE : CVE-2022-41840 영향 받는 버전 : Zenario CMS = 9.3 취약점 유형 : 인증되지 않은 파일 업로드로 인한 RCE 공격 벡터 : /zenario/ajax.php로의...

9.8CVSS8.8AI score0.05521EPSS

SaveExploits2

RedhatCVE•added 2026/03/27 2:24 p.m.•20 views

CVE-2021-27672

SQL Injection in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component...

4.9CVSS7.8AI score0.01327EPSS

SaveExploits1References1

GithubExploit•added 2026/02/19 6:19 a.m.•260 views

Exploit for Path Traversal in Welcart Welcart_E-Commerce

Zenario CMS 9.3 - Unauthenticated RCE Exploit CVE-2022-418...

9.8CVSS6.7AI score0.05521EPSS

SaveExploits2

RedhatCVE•added 2026/01/09 11:29 a.m.•14 views

CVE-2021-27673

Cross Site Scripting XSS in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "cID" parameter when creating a new HTML component...

4.8CVSS6.7AI score0.01089EPSS

SaveExploits4References1

RedhatCVE•added 2026/01/09 10:54 a.m.•15 views

CVE-2022-23043

Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Types' using the '.phar' extension. Then an attacker can upload a malicious file, intercept the request and change the extension to '.phar' in order to run commands on the server...

7.2CVSS6.9AI score0.01459EPSS

SaveExploits1References1

RedhatCVE•added 2026/01/09 9:36 a.m.•10 views

CVE-2024-34460

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...

6.5CVSS6.8AI score0.00551EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 9:35 a.m.•13 views

CVE-2024-34461

Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator...

9.8CVSS7.4AI score0.00954EPSS

SaveExploits0References1

EUVD•added 2025/10/07 12:30 a.m.•14 views

EUVD-2021-1331

Malware in sbrugna...

4.9CVSS5.2AI score0.01327EPSS

SaveExploits1References5

EUVD•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-1293

Malware in sbrugna...

4.8CVSS5.1AI score0.01089EPSS

SaveExploits4References7

EUVD•added 2025/10/03 8:07 p.m.•13 views

EUVD-2022-7250