1420 matches found
WordPress Plugin DukaPress 2.5.2 - Directory Traversal
A directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php. id: CVE-2014-8799 info: name: WordPress Plugin...
CVE-2009-2692
CVE-2009-2692 Linux Null pointer dereference This is just the compiled binary of the code available in https://www.exploit-db.com/exploits/9545/ Compiled for education purposes It was compiled under CentOS 4.8...
CVE-2018-10732
CVE-2018-10732 Exploit-DB publication at: No disclosure! Dataiku vendor Patch and Credits: https://doc.dataiku.com/dss/latest/releasenotes/4.2.htmlsecurity Author Alex Hernandez aka @alt3kx...
CVE-2015-2153
CVE-2015-2153 An implementation of the CVE-2015-2153 exploit. The exploit-db post can be found at https://www.exploit-db.com/exploits/37663/...
CVE-2017-9841
MASS CVE-2017-9841 Usage apt install python3 python3-pip -y pip3 install -r require.txt python3 main.py Preview Reference https://www.exploit-db.com/exploits/50702...
CVE-2022-24637
CVE-2022-24637 Fixed exploit for CVE-2022-24637 original xplt: https://www.exploit-db.com/exploits/51026...
Joomla! Jtag Members Directory 5.3.7 - Local File Inclusion
Joomla! Jtag Members Directory 5.3.7 is vulnerable to local file inclusion via the downloadfile parameter. id: CVE-2018-6008 info: name: Joomla! Jtag Members Directory 5.3.7 - Local File Inclusion author: daffainfo severity: high description: Joomla! Jtag Members Directory 5.3.7 is vulnerable to...
Rubedo CMS <=3.4.0 - Directory Traversal
Rubedo CMS through 3.4.0 contains a directory traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI. id: CVE-2018-16836 info: name:...
Oturia WordPress Smart Google Code Inserter <3.5 - Authentication Bypass
Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code via the sgcgoogleanalytic parameter that runs on all pages served by WordPress. The saveGoogleCode function in smartgooglecode.php does not check if the...
Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusion
In avataruploader v7.x-1.0-beta8 the view.php program doesn't restrict file paths, allowing unauthenticated users to retrieve arbitrary files. id: CVE-2018-9205 info: name: Drupal avataruploader v7.x-1.0-beta8 - Local File Inclusion author: daffainfo severity: high description: In avataruploader...
Oracle WebLogic Server - Remote Command Execution
The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. Versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. id: CVE-2019-2725 info: name: Oracle WebLogic...
KR-Web <=1.1b2 - Remote File Inclusion
KR-Web 1.1b2 and prior contain a remote file inclusion vulnerability via adm/krgourl.php, which allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter. id: CVE-2009-4223 info: name: KR-Web =1.1b2 - Remote File Inclusion author: geeknik severity: high...
Joomla! Helpdesk Pro plugin <1.4.0 - Local File Inclusion
Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in a ticket.downloadattachment task. id: CVE-2015-4074 info: name: Joomla! Helpdesk Pro plugin 1.4.0 - Local File...
Atlassian Confluence <5.8.17 - Information Disclosure
Atlassian Confluence before 5.8.17 contains an information disclsoure vulnerability. A remote authenticated user can read configuration files via the decoratorName parameter to 1 spaces/viewdefaultdecorator.action or 2 admin/viewdefaultdecorator.action. id: CVE-2015-8399 info: name: Atlassian...
MantisBT <=2.30 - Arbitrary Password Reset/Admin Access
MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php. id: CVE-2017-7615 THIS TEMPLATE IS ONLY FOR DETECTING To carry out further attacks, please see reference2 below. This template works by guessing user ID. MantisBT...
BOA Web Server 0.94.14 - Arbitrary File Access
BOA Web Server 0.94.14 is susceptible to arbitrary file access. The server allows the injection of "../.." using the FILECAMERA variable sent by GET to read files with root privileges and without using access credentials. id: CVE-2017-9833 info: name: BOA Web Server 0.94.14 - Arbitrary File Acces...
Fortinet-PoC-Auth-Bypass
Fortinet-PoC-Auth-Bypass Bash Proof of Concept PoC for Fortinet Authentication Bypass - CVE-2022-40684 Usage: Usage: ./poc.sh Example: ./poc.sh 10.10.10.120 8443 Available in Exploit-db: https://www.exploit-db.com/exploits/51092...
Log4j
1.Create a Sample Vulnerable Application . 2.Start a netcat listner . 3.Run the exploit . 5.Use jdk1.8.020 for better results . Exploit-db - https://www.exploit-db.com/exploits/50592...
CVE-2018-16763-exploit
CVE-2018-16763-exploit This is an updated version of the CVE-2018-16763 for fuelCMS 1.4.1 The script bases itself on the one from https://www.exploit-db.com/exploits/47138 The script is updated for usage with Python 3...