Powershell Exec, Windows Upload/Execute, Reverse All-Port TCP Stager

Execute an x86 payload from a command via PowerShell. Uploads an executable and runs it staged. Try to connect back to the attacker, on all possible ports 1-65535, slowly Module Options msf use payload/cmd/windows/powershell/upexec/reversetcpallports msf payloadreversetcpallports show actions...

CVE-2022-0027

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not hav...

CVE-2022-1476

The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the /lib/model/class-ai1wm-backups.php file, in versions up to, and including, 7.58. This can be exploited by administrative users, and users w...

Arbitrary file deletion

The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the /lib/model/class-ai1wm-backups.php file, in versions up to, and including, 7.58. This can be exploited by administrative users, and users w...

CVE-2022-1476

All-in-One WP Migration plugin for WordPress (up to version 7.58) is affected by a directory traversal vulnerability in lib/model/class-ai1wm-backups.php that allows arbitrary file deletion. The issue arises from insufficient file validation and can be exploited by administrative users or users w...

WordPress plugin All-in-One WP Migration 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress All-in-One WP Migration 7.58 and prior versions have a path traversal vulnerability that ca...

eurotherm-sales.com Cross Site Scripting vulnerability OBB-2613414

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

多款Hewlett Packard Enterprise安全漏洞

Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays are products of Hewlett Packard Enterprise.Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays is an adaptive flash array storage product.Hewlett Packard Enterprise Nimble Storage All Flash Arrays is an all-flash array storag...

PT-2022-16215 · Hewlett Packard · Hpe Nimble Storage All Flash Arrays +2

Name of the Vulnerable Software and Affected Versions: HPE Nimble Storage Hybrid Flash Arrays versions prior to 5.0.10.100 HPE Nimble Storage All Flash Arrays versions prior to 5.0.10.100 HPE Nimble Storage Secondary Flash Arrays versions prior to 5.0.10.100 HPE Nimble Storage Hybrid Flash Arrays...

CVE-2022-28461

mingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection...

CVE-2021-25102

The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirectto parameter before using it to redirect user, either via a Location header, or meta url attribute, when the Rename Login Page is active, which could lead to an Arbitrary Redire...

CVE-2021-25102

The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirectto parameter before using it to redirect user, either via a Location header, or meta url attribute, when the Rename Login Page is active, which could lead to an Arbitrary Redire...

WordPress plugin All In One WP Security & Firewall 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress All In One WP Security...

Jailed 安全漏洞

Jailed is a small JavaScript library for npmjs that is used to run untrusted code in a sandbox. All versions of Jailed have a security vulnerability that can be exploited by attackers to bypass the sandbox...

Lukeed Dset 安全漏洞

Lukeed Dset is a codebase by the individual developer of Lukeed that can assign values to objects of dictionary type based on the Javascript language. A security vulnerability exists in all versions of Lukeed Dset, which can be exploited by an attacker to implement a prototype contamination attac...

PT-2022-14877 · Npm · Libxmljs

Name of the Vulnerable Software and Affected Versions: libxmljs versions all Description: The issue arises when the libxmljs.parseXml function is invoked with a non-buffer argument. In such cases, the V8 code attempts to call the toString method of the argument. If the argument's toString value i...

materialize-css 跨站脚本漏洞

materialize-css is a CSS framework based on Material Design. A security vulnerability exists in all versions of the materialize-css package that originates from user input being parsed as HTML/JavaScript and inserted into the Document Object Model DOM, which can be exploited by an attacker to...

CVE-2022-29414

Multiple 13x Cross-Site Request Forgery CSRF vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin mass update settings, manage subscriptions add a new subscription, update subscription, delete Subscription...

ALLPlayer ALLMediaServer 安全漏洞

ALLMediaServer is a media player from ALLPlayer Group Ltd, Poland, which allows you to watch or play videos, listen to music or view photos on all devices TV, smartphone, Chromecast, XBOX, Smart TV. A security vulnerability exists in ALLMediaServer version 1.6, which stems from vulnerability to a...

WordPress All in One WP Migration plugin <= 7.58 - Directory Traversal to File Deletion on Windows Hosts vulnerability

Directory Traversal to File Deletion on Windows Hosts vulnerability discovered by haidv35 Viettel Cyber Security in WordPress All-in-One WP Migration plugin versions = 7.58. Solution Update the WordPress All-in-One WP Migration plugin to the latest available version at least 7.59...