15460 matches found
Arbitrary File Upload
encore/laravel-admin is vulnerable to Arbitrary File Upload. The vulnerability exists because the library does not properly validate files uploaded, allowing an attacker to bypass the file upload restrictions by uploading a malicious .php file...
Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload Exploit
This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in Oracle Web Applications Desktop Integrator, as shipped with Oracle EBS versions 12.2.3 through to 12.2.11, in order to gain remote code execution as the oracle user. This module requires Metasploit:...
Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/zip' class MetasploitModule 'Oracle E-Business Suite EBS Unauthenticated Arbitrary File Upload', 'Description' = %q This module exploits an unauthenticated...
GHSA-G857-47PM-3R32 laravel-admin has Arbitrary File Upload vulnerability
An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file...
laravel-admin has Arbitrary File Upload vulnerability
An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2023-24249
An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file...
Privilege escalation
An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2023-26762
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability...
CVE-2023-26762
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability...
Privilege escalation
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability...
Sme.UP ERP 代码问题漏洞
Sme.UP ERP is a management software developed by Sme.UP Italy to meet the needs of its customers. A security vulnerability exists in Sme.UP ERP TOKYO V6R1M220406 version, which originates from an arbitrary file upload vulnerability...
CVE-2023-26762
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability...
CVE-2023-24249
CVE-2023-24249 affects laravel-admin v1.8.19, where an unrestricted file upload vulnerability allows an attacker to upload and execute arbitrary PHP code. The connected documents include PoCs/exploits showing a web shell upload and execution, confirming practical risk. The vulnerability stems fro...
PT-2023-19497 · Unknown · Laravel-Admin
Name of the Vulnerable Software and Affected Versions: laravel-admin version 1.8.19 Description: An arbitrary file upload vulnerability allows attackers to execute arbitrary code via a crafted PHP file. This issue has been exploited in real-world attacks, including a reported instance where an...
CVE-2023-24249
An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file...
laravel-admin 代码问题漏洞
z-song laravel-admin is an administrative interface builder for the Laravel web development framework. A security vulnerability exists in laravel-admin v1.8.19, which stems from the existence of an arbitrary file upload vulnerability that can be exploited by an attacker to execute arbitrary code...
CVE-2023-26762
CVE-2023-26762 affects Sme.UP ERP TOKYO V6R1M220406 and is an arbitrary file upload vulnerability. The provided data describe an external-facing issue with a CVSS v3.1 base score of 8.8 (High) and impact on confidentiality, integrity, and availability. The root cause is an arbitrary file upload f...
CVE-2023-26762
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability...