Lucene search
+L

16 matches found

Kitploit
Kitploit
added 2026/09/04 8:01 a.m.6 views

CVE-2019-11447-EXP

CVE-2019-11447-EXP CuteNews Avatar 2.1.2 リモートコード実行の脆弱性 pythonスクリプトを実行する前に、まずncコマンドを実行してください。デフォルトのポートは1234です。 次にexploit.pyを実行し、ヒントに従って必要な内容を入力してください。...

8.8CVSS8.1AI score0.52272EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/03 5:10 p.m.1 views

CVE-2019-11447_reverse_shell_upload

CVE-2019-11447 CuteNews 2.1.2 リバースシェルアップロード Mt-Code POC を少し修正したバージョンで、Webシェルではなく完全なリバースシェルを起動します。 このエクスプロイトは、有名な PentestMonkey PHP Reverse Shell を使用しています。 インストール pip install -r requirements.txt 使用例: アプリケーション上でユーザーを作成する 次を実行する python exploit.py http://target/index.php myuser mypassword...

8.8CVSS7.2AI score0.52272EPSS
SaveExploits12References2
Kitploit
Kitploit
added 2026/09/02 12:40 a.m.5 views

cve-2019-11447

CVE-2019-11447 CutePHP Cute News 2.1.2 RCE PoC 対象 : 2.1.2 このPoCスクリプトは、BobbySox によるオリジナルエクスプロイトのシンプルな実装に基づいています。オリジナルのエクスプロイトは Akuss によるMSFモジュールです。 このスクリプトには、対象のIPアドレスまたはドメインと認証情報が必要です。スクリプトは自動的にログインし、ペイロードをアップロードしてトリガーし、リバースシェルを取得します。 root@kitploit: python cve-2019-11447.py -t 10.10.10.206 -u twh...

8.8CVSS8.1AI score0.52272EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/01 3:27 p.m.5 views

WordPress-Path-Traversal-CVE-2019-11447

渗透测试报告 WordPress 路径遍历 - CVE-2019-11447 文档信息...

8.8CVSS8.1AI score0.52272EPSS
SaveExploits12
RedhatCVE
RedhatCVE
added 2026/01/09 10:11 a.m.16 views

CVE-2019-11447

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatarfile field to index.php?mod=main=personal. There is no effective control of $imgsize in /core/modules/dashboard.php. The header content of a...

8.8CVSS7.2AI score0.52272EPSS
SaveExploits12References1
GithubExploit
GithubExploit
added 2024/02/11 9:36 p.m.251 views

Exploit for Unrestricted Upload of File with Dangerous Type in Cutephp Cutenews

sadnews CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept POC...

9.3CVSS8.8AI score0.52272EPSS
SaveExploits13
zdt
zdt
added 2021/03/18 12:00 a.m.991 views

CuteNews 2.1.2 Shell Upload Exploit

CuteNews version 2.1.2 Avatar upload remote shell upload exploit. Original discovery of remote shell upload in this version is attributed to Ozkan Mustafa Akkus in April of 2019. ! /usr/bin/env python3 Exploit Title: CuteNews 2.1.2 - Avatar upload RCE Authenticated Exploit Author: Mayank Deshmukh...

8.8CVSS0.5AI score0.52272EPSS
SaveExploits12
GithubExploit
GithubExploit
added 2021/03/17 12:07 p.m.110 views

Exploit for Unrestricted Upload of File with Dangerous Type in Cutephp Cutenews

CVE-2019-11447 Exploit/PoC - CuteNews 2.1.2 Avatar upload RCE...

8.8CVSS8.9AI score0.52272EPSS
SaveExploits12
Packet Storm
Packet Storm
added 2021/03/17 12:00 a.m.1121 views

CuteNews 2.1.2 Shell Upload

! /usr/bin/env python3 Exploit Title: CuteNews 2.1.2 - Avatar upload RCE Authenticated Exploit Author: Mayank Deshmukh Date: 2021-03-17 Vendor Homepage: https://cutephp.com/ Software Link: https://cutephp.com/click.php?cutenewslatest Version: 2.1.2 CVE: CVE-2019-11447 CVE Reference:...

6.5CVSS8.7AI score0.52272EPSS
SaveExploits12
GithubExploit
GithubExploit
added 2020/10/30 8:21 a.m.73 views

Exploit for Unrestricted Upload of File with Dangerous Type in Cutephp Cutenews

CVE-2019-11447-EXP CuteNews Avatar 2.1.2 Remote Code Executio...

8.8CVSS3.9AI score0.52272EPSS
SaveExploits12
GithubExploit
GithubExploit
added 2020/10/18 1:49 p.m.151 views

Exploit for Unrestricted Upload of File with Dangerous Type in Cutephp Cutenews

CVE-2019-11447 - PoC Exploits CuteNews 2.1.2 via poor file up...

8.8CVSS0.3AI score0.52272EPSS
SaveExploits12
Check Point Advisories
Check Point Advisories
added 2020/09/29 12:00 a.m.44 views

CutePHP Cutenews Remote Code Execution (CVE-2019-11447)

A remote code execution vulnerability exists in CutePHP CuteNews. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.5CVSS5.2AI score0.52272EPSS
SaveExploits12
Packet Storm
Packet Storm
added 2020/09/10 12:00 a.m.702 views

CuteNews 2.1.2 Remote Code Execution

Exploit Title: CuteNews 2.1.2 - Remote Code Execution Google Dork: N/A Date: 2020-09-10 Exploit Author: Musyoka Ian Vendor Homepage: https://cutephp.com/cutenews/downloading.php Software Link: https://cutephp.com/cutenews/downloading.php Version: CuteNews 2.1.2 Tested on: Ubuntu 20.04, CuteNews...

6.5CVSS0.52272EPSS
SaveExploits12
Openbugbounty
Openbugbounty
added 2019/11/30 7:07 p.m.20 views

livedronenews.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1026695 Security Researcher g0bl1nsec Helped patch 3766 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting livedronenews.com website...

0.2AI score
SaveExploits0
CVE
CVE
added 2019/04/22 4:01 a.m.374 views

CVE-2019-11447

CVE-2019-11447 affects CuteNews 2.1.2 (CutePHP CuteNews). The vulnerability allows remote code execution via the avatar upload process: an attacker can place a crafted file in avatar_file for index.php?mod=main&opt=personal, exploiting insufficient validation of image size ($imgsize) in /core/mod...

8.8CVSS8.7AI score0.52272EPSS
SaveIn wildExploits12References3Affected Software1
Circl
Circl
added 2019/04/15 12:00 a.m.17 views

CVE-2019-11447

creationtimestamp| type| source ---|---|--- 2019-04-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46698 2020-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48800 2024-11-14 06:07:03+00:00| seen| MISP/e0a2986c-7c54-4933-95c6-841854d50e7f...

8.8CVSS6.8AI score0.52272EPSS
SaveExploits12References2
Rows per page
Query Builder