GitLab Resource Management Error Vulnerability (CNVD-2021-19408)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab 13.0.1 and...

Zimbra Code Issues Vulnerabilities

Zimbra is the United States Zimbra company's set of open source e-mail collaboration platform. A code issue vulnerability exists in the /service/upload program in the Webmail subsystem in versions of Zimbra prior to 8.8.15 Patch 10 and 9.x prior to 9.0.0 Patch 3, which can be exploited by an...

Adobe ColdFusion 2018 Shell Upload

Exploit Title: Unrestricted file upload in Adobe ColdFusion 2018 Google Dork: ext:cfm Date: 10-12-2018 Exploit Author: Pete Freitag of Foundeo Reversed: Vahagn vah13 Vardanian Vendor Homepage: adobe.com Version: 2018 Tested on: Adobe ColdFusion 2018 CVE : CVE-2018-15961 Comment: September 28, 201...

Adobe ColdFusion 2018 - Arbitrary File Upload

Exploit Title: Unrestricted file upload in Adobe ColdFusion 2018 Google Dork: ext:cfm Date: 10-12-2018 Exploit Author: Pete Freitag of Foundeo Reversed: Vahagn vah13 Vardanian Vendor Homepage: adobe.com Version: 2018 Tested on: Adobe ColdFusion 2018 CVE : CVE-2018-15961 Comment: September 28, 201...

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat

POCCVE-2017-12615 C...

IBOS open source the latest version of a arbitrary file upload

No description provided by source...

Pear HTTP_Upload 1.0. 0b3 - arbitrary file upload

No description provided by source...

CNDSOFT 2.3 - Cross-Site Request Forgery Arbitrary File Upload

CNDSOFT 2.3 - Cross-Site Request Forgery Arbitrary File Upload ========================================================================================================= Exploit Title: CNDSOFT 2.3 - Arbitrary File Upload with CSRF shell.php Author: Besim Google Dork: - Date: 19/10/2016 Type: webap...

Viart Shopping Cart 5.0 - Cross-Site Request Forgery Arbitrary File Upload

Viart Shopping Cart 5.0 - Cross-Site Request Forgery Arbitrary File Upload function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "http://localhost/admin/adminfmuploadfiles.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8";...

CVE-2015-8105

Cross-site scripting XSS vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload...

h5ai < 0.25.0 /server/php/inc/Api.php 任意文件上传漏洞

No description provided by source...

一采通电子采购系统任意文件上传Getshell #2

简要描述： 一采通电子采购系统任意文件上传Getshell 2 详细说明： 上传点 /Supplier/UploadFile.aspx 以吉利采购平台为例 http://.../Supplier/UploadFile.aspx 上传时抓包，修改两处 1.filename前面加\ 2.hidTrueName的值 shell：http://.../d.asp 漏洞证明： 其他例子还有 http://.../Supplier/UploadFile.aspx http://.../Supplier/UploadFile.aspx .../Supplier/UploadFile.aspx...

aspwebalbum 3.2 - Multiple Vulnerabilities

No description provided by source. - Discovered by AleminKrali - aspWebAlbum 3.2 - Script Download http://www.fullrevolution.com - aspWebAlbum 3.2 Single Site License | $60.00 : - HomePage al3m.blogspot.com - [email protected] - Dork ? : album.as...

Thinksns2. 8 file upload exploit exp-vulnerability warning-the black bar safety net

Vulnerability version The presence of vulnerabilities the version: latest 2. 8 stable version. Other version not test. Vulnerability file Vulnerable file is: thumb.php Author: Wei kunpeng 1, Prepare the following PHP file and upload it to the server yourself. File content as follows: ? php echo “...

Webify Business Directory - Arbitrary File Deletion

!x! Informations: Name : Webify business directory Download : http://webify.ws/businessdirectory Vulnerability : Delete Arbitrary File Vulnerability Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM !x! Bug: Delete Arbitrary File Vulnerability y...

miniCMS v1.0 => v2.0 Arbitrary File Upload

Exploit for php platform in category web applications Title : miniCMS v1.0 = v2.0 Arbitrary File Upload Author : Or4nG.M4n Version : all version GDork : "This site is managed using MiniCMSŠ" Download : http://sourceforge.net/projects/mini-cms/files/mini-cms/ Thnks :...

appRain CMF 0.1.5 - Uploadify.php Unrestricted Arbitrary File Upload

appRain CMF 0.1.5 - Uploadify.php Unrestricted Arbitrary File Upload ?php / --------------------------------------------------------------------- appRain CMF = 0.1.5 uploadify.php Unrestricted File Upload Exploit ---------------------------------------------------------------------...

Simple Machines Forum (SMF) 1.1.15 - 'fckeditor' Arbitrary File Upload

source: https://www.securityfocus.com/bid/50925/info Simple Machines Forum is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in...

PHP-Nuke 8.3 - 'upload.php' Arbitrary File Upload (2)

source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process...

MetInfo 3.0 - 'FCKeditor' Arbitrary File Upload

Exploit Title: MetInfo 3.0 fckeditor File Upload Exploit Date: 02-11-2010 Author: sh3n Software Link: http://www.metinfo.cn/upload/file/metinfo3.0.zip Version: 3.0 Tested on: BT4 Ubuntu, Windows 7 Ultimate Exploit: metinfo.pe/fckeditor/editor/filemanager/connectors/uploadtest.html...