Lucene search
+L

62 matches found

Kitploit
Kitploit
•added 2026/10/02 4:53 a.m.•13 views

Kcfinder-Mass-Scanner

Kcfinder-Mass-Scanner Python 2.7 使い方 Python 2.7 をインストール ここからダウンロード python file.py...

6AI score
SaveExploits0
NVD
NVD
•added 2026/09/30 1:16 a.m.•7 views

CVE-2026-102842

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this issue is the function appuserloginmodel.php::cekUserLogin of the file application/models/appuserloginmodel.php of the component KCFinder File Manager. Such manipulatio...

6.5CVSS0.00276EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/30 12:30 a.m.•15 views

CVE-2026-102842

A vulnerability exists in the KCFinder File Manager component of gedelumbung HospitalManagement (up to commit c2d45543789a3887067d3915f69d44cfc2cf76a8). The root cause is located in the app_user_login_model.php::cekUserLogin function within the application/models/app_user_login_model.php file, wh...

6.5CVSS5.3AI score0.00276EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/30 12:30 a.m.•6 views

CVE-2026-102842 gedelumbung HospitalManagement KCFinder File Manager app_user_login_model.php cekUserLogin unrestricted upload

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this issue is the function appuserloginmodel.php::cekUserLogin of the file application/models/appuserloginmodel.php of the component KCFinder File Manager. Such manipulatio...

6.5CVSS5.3AI score0.00276EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/30 12:30 a.m.•10 views

EUVD-2026-89543

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this issue is the function appuserloginmodel.php::cekUserLogin of the file application/models/appuserloginmodel.php of the component KCFinder File Manager. Such manipulatio...

6.5CVSS5.3AI score0.00276EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/30 12:30 a.m.•29 views

CVE-2026-102842 gedelumbung HospitalManagement KCFinder File Manager app_user_login_model.php cekUserLogin unrestricted upload

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this issue is the function appuserloginmodel.php::cekUserLogin of the file application/models/appuserloginmodel.php of the component KCFinder File Manager. Such manipulatio...

6.5CVSS0.00276EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2014-1302

Malware in sbrugna...

4CVSS8.9AI score0.08795EPSS
SaveExploits12References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2014-3921

Malware in sbrugna...

4.3CVSS6.4AI score0.014EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2018-13784

Malware in sbrugna...

8.8CVSS8.6AI score0.01485EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-5442

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.01242EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/05/22 8:36 a.m.•22 views

CVE-2019-14315

A cross-site scripting XSS vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter...

6.1CVSS5.6AI score0.01242EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 6:49 a.m.•26 views

CVE-2018-25002

uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal's security advisory policy...

8.8CVSS7.1AI score0.01485EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/05/24 4:51 p.m.•49 views

SunHater KCFinder cross-site scripting (XSS) vulnerability in upload.php

A cross-site scripting XSS vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter...

6.1CVSS5.8AI score0.01242EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/05/24 4:51 p.m.•60 views

GHSA-VWH5-78JC-HPJX SunHater KCFinder cross-site scripting (XSS) vulnerability in upload.php

A cross-site scripting XSS vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter...

6.1CVSS5.9AI score0.01242EPSS
SaveExploits1References4
Packet Storm
Packet Storm
•added 2021/03/26 12:00 a.m.•738 views

Development Kamel KCFinder 1.7 Shell Upload

Exploit Title : Development Kamel - KCFinder Shell Upload Vulnerability + Date : 25/03/2021 + Exploit Author : RAYAN ALi + Home : http://kamel.tech/ + Discovered By : RAYAN + Vendor Homepage : http://kamel.tech/ + Exploit: + http://localhost/resources/admin/Editor/kcfinder/browse.php?type=files +...

0.3AI score
SaveExploits0
zdt
zdt
•added 2021/03/25 12:00 a.m.•123 views

Development Kamel KCFinder 1.7 Shell Upload Vulnerability

Exploit Title : Development Kamel - KCFinder Shell Upload Vulnerability + Date : 25/03/2021 + Exploit Author : RAYAN ALi + Home : http://kamel.tech/ + Discovered By : RAYAN + Vendor Homepage : http://kamel.tech/ + Exploit: + http://localhost/resources/admin/Editor/kcfinder/browse.php?type=files +...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2021/03/19 12:00 a.m.•57 views

CouchCMS 2.2.1 - Server-Side Request Forgery

Exploit Title: CouchCMS 2.2.1 - SSRF via SVG file upload Date: 2021-01-25 Exploit Author: xxcdd Vendor Homepage: https://github.com/CouchCMS/CouchCMS Software Link: https://github.com/CouchCMS/CouchCMS Version: v2.2.1 Tested on: Windows 7 An issue was discovered in CouchCMS v2.2.1...

5.3AI score
SaveExploits0
OSV
OSV
•added 2021/01/01 1:15 a.m.•15 views

CVE-2018-25002

uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal's security advisory policy...

8.8CVSS5.8AI score0.01485EPSS
SaveExploits0References3
NVD
NVD
•added 2021/01/01 1:15 a.m.•39 views

CVE-2018-25002

uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal's security advisory policy...

8.8CVSS8.8AI score0.01485EPSS
SaveExploits0References3
Prion
Prion
•added 2021/01/01 1:15 a.m.•30 views

Code injection

uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal's security advisory policy...

6.5CVSS8.7AI score0.01485EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder