1011 matches found
IPS Community Suite - Unauthenticated SQL Injection
IPS Community Suite is vulnerable to unauthenticated SQL injection via the filter parameter in the /index.php?/store/ endpoint, allowing attackers to extract sensitive information from the database. id: CVE-2024-30163 info: name: IPS Community Suite - Unauthenticated SQL Injection author:...
CVE-2025-48932---exploit
Explotación de inyección SQL en Invision Community CVE-2025-48932 Un exploit de prueba de concepto que demuestra una vulnerabilidad de inyección SQL en Invision Community versiones = 4.7.20. ⚠️ Descargo de responsabilidad Esta herramienta se proporciona únicamente con fines educativos y de pruebas...
CVE-2025-47916
CVE-2025-47916 - Invision Community 远程代码执行漏洞 关于 本仓库为 CVE‑2025‑47916 提供了概念验证描述，这是一个影响 Invision Community 5.0.0 至 5.0.6 版本的远程代码执行漏洞。该问题源于 customCss 方法对用户提供输入的不当处理，允许未认证的攻击者执行精心构造的模板表达式。 受影响版本 所有从 5.0.0 到 5.0.6 的版本 描述 漏洞位于以下文件中的 IPS\core\modules\front\system\themeeditor::customCss 方法内： root@kitploit...
CVE-2025-48932-Invision-Community-SQLi-Exploit
🔓 CVE-2025-48932 - Exploit de inyección SQL en Invision Community ⚡ Resumen de la vulnerabilidad crítica CVE-2025-48932 es una vulnerabilidad crítica de inyección SQL ciega no autenticada descubierta en Invision Community versiones ≤ 4.7.20. Este exploit permite a atacantes remotos: 🔍 Extraer...
Invision Community <=5.0.6 Unauthenticated RCE via Template Injection
Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller /applications/core/modules/front/system/themeeditor.php, where a protected method named customCss can be invoked by unauthenticated...
Exploit for CVE-2025-48932
CVE-2025-48932-Invision-Community-SQLi-Exploit CVE-2025-48932...
CVE-2005-1443
Multiple cross-site scripting XSS vulnerabilities in index.php for Invision Power Board IPB 2.0.3 and 2.1 Alpha 2 allows remote attackers to inject arbitrary web script or HTML via the 1 act, 2 Members, 3 calendar, or 4 HID parameters...
CVE-2007-4913
ipskernel/classupload.php in Invision Power Board IPB or IP.Board 2.3.1 up to 20070912 allows remote attackers to upload arbitrary script files with crafted image filenames to uploads/, where they are saved with a .txt extension and are not executable. NOTE: there are limited usage scenarios unde...
📄 Invision Community 5.0.6 customCss Expression Injection
Invision Community version 5.0.6 customCss expression injection proof of concept exploit written in PHP. ============================================================================================================================================= | Title : Invision Community 5.0.6 customCss...
Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Invisioncommunity
CVE-2025-47916 - Invision Community Remote Code Execution RCE...
EUVD-2002-1136
Malware in sbrugna...
EUVD-2010-3422
Malware in sbrugna...
EUVD-2005-3394
Malware in sbrugna...
EUVD-2004-0359
Malware in sbrugna...
EUVD-2004-1525
Malware in sbrugna...
EUVD-2006-1373
Malware in sbrugna...
EUVD-2006-2205
Malware in sbrugna...
EUVD-2004-2271
Malware in sbrugna...