146 matches found
CVE-2023-41892_PoC
CraftCMS 未授权远程代码执行漏洞（CVE-2023-41892） Craft CMS 是一个灵活、用户友好的内容管理系统，用于在 Web 上创建自定义的数字体验。它为用户提供了一个后端界面来实现网站并配置 CMS。 Craft CMS 4.4.0 至 4.4.14 版本中存在一个远程代码执行漏洞。未经身份验证的攻击者可以通过 ConditionsController 实现远程代码执行。该漏洞存在于控制器的 beforeAction 方法中，由于输入验证不足，攻击者可以利用该漏洞创建任意对象并实现代码执行。 参考链接：...
CVE-2016-3714
CVE-2016-3714 Ejecución de código en ImageMagick CVE-2016-3714 imagickbuilder.py = Constructor de payloads simple para explotar CVE-2016-3714 imagickbypassshell.php = Web shell basada en PHP que aprovecha el wrapper de la extensión PHP imagick para evadir funciones deshabilitadas Algunas imágenes...
CVE-2023-4636
CVE-2023-4636 该 limelight 中的漏洞是一个未授权的远程代码执行（RCE）问题，源于通过 Imagick 处理图像时对文件路径的控制不足。它使得攻击者能够通过 FTP 提供文件，从而导致本地文件包含和远程代码执行。在这种情况下，攻击者可能能够接管任何未打补丁的 WordPress 网站。 截图 要求 Python3.7+ 支持的操作系统 Linuxer Wingays 开始使用 $ git clone https://github.com/ThatNotEasy/CVE-2023-4636 $ cd CVE-2023-4636 $ pip/pip3 install ...
CVE-2023-4634
CVE-2023-4634 Exploit de RCE para el plugin Media-Library de WordPress 3.10 CVE-2023-4634 Información Patrowl descubrió una vulnerabilidad de RCE no autenticada en el plugin Media-Librairy-Assistant de WordPress en versiones 3.10. El exploit no es trivial y requiere solo una pequeña configuración...
CVE-2026-85750
Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when using the Imagick library due to insufficient validation and unsafe processing of user-supplied image files. By abusing format confusion e.g., disguising SVG content as PNG, an...
CVE-2026-85750 Piwigo arbitrary file read and remote code execution via insecure image processing
Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when using the Imagick library due to insufficient validation and unsafe processing of user-supplied image files. By abusing format confusion e.g., disguising SVG content as PNG, an...
CVE-2026-85750 Piwigo arbitrary file read and remote code execution via insecure image processing
Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when using the Imagick library due to insufficient validation and unsafe processing of user-supplied image files. By abusing format confusion e.g., disguising SVG content as PNG, an...
CVE-2026-85750 Piwigo arbitrary file read and remote code execution via insecure image processing
Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when using the Imagick library due to insufficient validation and unsafe processing of user-supplied image files. By abusing format confusion e.g., disguising SVG content as PNG, an...
CVE-2026-85750
Versions of Piwigo prior to v16.4.0 are vulnerable to arbitrary file read and remote code execution (RCE) during image upload handling when utilizing the Imagick library . The root cause is insufficient validation and unsafe processing of user-supplied image files. Specifically, an attacker can e...
EUVD-2026-87094
Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when using the Imagick library due to insufficient validation and unsafe processing of user-supplied image files. By abusing format confusion e.g., disguising SVG content as PNG, an...
CVE-2026-85750: Improper Input Validation
Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when using the Imagick library due to insufficient validation and unsafe processing of user-supplied image files. By abusing format confusion e.g., disguising SVG content as PNG, an...
BIT-WORDPRESS-MULTISITE-2026-65640
WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...
BIT-WORDPRESS-2026-65640
WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...
PT-2026-80003
WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the upload files capability This issue affects all versions of WordPress...
PT-2026-80004
WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the upload files capability This issue affects all versions of WordPress...
Linux Distros Unpatched Vulnerability : CVE-2026-65640
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick...
DEBIAN-CVE-2026-65640
WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...
UBUNTU-CVE-2026-65640
WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...
CVE-2026-65640
WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...