CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

207 matches found

Kitploit•added 2026/09/01 12:47 a.m.•4 views

CVE-2021-42171

CVE-2021-42171 Subida de archivos para ejecución remota de código en Zenario CMS 9.0.54156 https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74 root@kitploit: Server test Distributor ID: Ubuntu Description: Ubuntu 21.04 Release: 21.04 Codename: hirsute...

7.2CVSS7.1AI score0.02523EPSS

SaveExploits5

Kitploit•added 2026/08/29 2:26 a.m.•4 views

CVE-2022-41840-PoC

Zenario CMS 9.3 - Exploit RCE non autenticato CVE-2022-41840 Una vulnerabilità di esecuzione remota di codice RCE non autenticata che affligge Zenario CMS versione 9.3 e precedenti. L'exploit sfrutta una vulnerabilità di upload di file nell'endpoint AJAX per caricare una webshell PHP e ottenere...

9.8CVSS7.3AI score0.05212EPSS

SaveExploits2

RedhatCVE•added 2026/03/27 2:24 p.m.•19 views

CVE-2021-27672

SQL Injection in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component...

4.9CVSS7.8AI score0.01327EPSS

SaveExploits1References1

GithubExploit•added 2026/02/19 6:19 a.m.•252 views

Exploit for Path Traversal in Welcart Welcart_E-Commerce

Zenario CMS 9.3 - Unauthenticated RCE Exploit CVE-2022-418...

9.8CVSS6.7AI score0.05212EPSS

SaveExploits2

RedhatCVE•added 2026/01/09 11:29 a.m.•12 views

CVE-2021-27673

Cross Site Scripting XSS in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "cID" parameter when creating a new HTML component...

4.8CVSS6.7AI score0.01089EPSS

SaveExploits4References1

RedhatCVE•added 2026/01/09 10:54 a.m.•10 views

CVE-2022-23043

Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Types' using the '.phar' extension. Then an attacker can upload a malicious file, intercept the request and change the extension to '.phar' in order to run commands on the server...

7.2CVSS6.9AI score0.01459EPSS

SaveExploits1References1

EUVD•added 2025/10/07 12:30 a.m.•11 views

EUVD-2021-1331

Malware in sbrugna...

4.9CVSS5.2AI score0.01327EPSS

SaveExploits1References5

EUVD•added 2025/10/07 12:30 a.m.•12 views

EUVD-2021-1293

Malware in sbrugna...

4.8CVSS5.1AI score0.01089EPSS

SaveExploits4References7

EUVD•added 2025/10/03 8:07 p.m.•13 views

EUVD-2022-1561