CVE-2015-6967

CVE-2015-6967 Nibbleblog 4.0.3 - Subida de archivos arbitraria CVE-2015-6967 requisitos python 3 requests uso usage: exploit.py -h --url URL --username USERNAME --password PASSWORD --payload PAYLOAD optional arguments: -h, --help muestra este mensaje de ayuda y sale --url URL, -l URL --username...

CVE-2015-6967-EXPLOIT

CVE-2015-6967-EXPLOIT CVE-2015-6967 PoC 漏洞利用工具 该 Python 脚本利用 Nibbleblog 中的一个漏洞（CVE-2015-6967），向目标上传一个反向 Shell。脚本会接收用户输入的目标 URL、用户凭证以及你的主机 IP/端口，然后通过上传一个 PHP 反向 Shell 来触发漏洞。 免责声明 本脚本仅用于教育目的。严禁 将其用于非法活动。在测试或利用任何你不拥有或未获授权访问的系统上的漏洞之前，务必获得明确的许可。 依赖要求 Python 3.x requests 库 argparse 库 colorama 库 pyfigle...

HTB_Nibbles

HTBNibbles 在此仓库中，你将找到 Nibbles 的技术报告、利用 CVE-2015-6967 的漏洞利用脚本 pwned.py 以及一个自动利用工具 autopwn.py，方便你拿下 HackTheBox 中的该机器。 Pwned.py 工具：该文件将帮助你利用 CVE-2015-6967。要运行此漏洞利用，你需要满足 3 个条件： 你需要创建一个 PHP 文件，其中包含要在 Nibbleblog 服务器上执行的命令。例如： 如果你想执行反弹 shell，则需要在你于 PHP 文件中指定的同一端口上进行监听。 正确运行该工具：python3 pwned.py...

CVE-2019-7719

Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.php request...

EUVD-2019-17251

Malware in sbrugna...

EUVD-2018-18226

Malware in sbrugna...

EUVD-2018-8411

Malware in sbrugna...

EUVD-2014-8822

Malware in sbrugna...

EUVD-2020-16103

Malware in sbrugna...

EUVD-2015-6898

Malware in sbrugna...

CVE-2020-23356

dmin/kernel/api/login.class.phpin in nibbleblog v3.7.1c allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...

CVE-2015-6967

Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/myimage/image.php...

CVE-2018-16604

An issue was discovered in Nibbleblog v4.0.5. With an admin's username and password, an attacker can execute arbitrary PHP code by changing the username because the username is surrounded by double quotes e.g., "$phpinfo"...

CVE-2015-6966

Multiple cross-site request forgery CSRF vulnerabilities in Nibbleblog before 4.0.5 allow remote attackers to hijack the authentication of administrators for requests that 1 create a post via a newsimple action to admin.php or 2 conduct cross-site scripting XSS attacks via the content parameter i...

Exploit for CVE-2015-6967

CVE-2015-6967 Nibbleblog 4.0.3 - Arbitrary File Upload CVE-2...

CVE-2020-23356

dmin/kernel/api/login.class.phpin in nibbleblog v3.7.1c allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...

Design/Logic Flaw

dmin/kernel/api/login.class.phpin in nibbleblog v3.7.1c allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...

CVE-2020-23356

NIBBLEBLOG 3.7.1c contains a login bypass due to type juggling: PHP code uses == instead of === for password comparison, mishandling hashes starting with 0e followed by digits. This allows bypass via non-strict comparison in admin/kernel/api/login.class.php. Documents identify the issue and affec...

CVE-2020-23356

dmin/kernel/api/login.class.phpin in nibbleblog v3.7.1c allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...

CVE-2020-23356

dmin/kernel/api/login.class.phpin in nibbleblog v3.7.1c allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...