Baldr Botnet Panel Shell Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Baldr Botnet Panel Shell Upload Exploit', 'Description' = %q This module exploits a arbitrary file upload vulnerability within the Baldr stealer...

CVE-2020-7206

HP nagios plugin for iLO nagios-plugins-hpilo v1.50 and earlier has a php code injection vulnerability...

CVE-2020-7206

HP nagios plugin for iLO nagios-plugins-hpilo v1.50 and earlier has a php code injection vulnerability...

CVE-2020-7206

HP nagios plugin for iLO nagios-plugins-hpilo v1.50 and earlier has a php code injection vulnerability...

CVE-2020-7206

CVE-2020-7206 concerns a php code injection vulnerability in the HP nagios plugin for iLO (nagios-plugins-hpilo) affecting version 1.50 and earlier. Connected sources confirm the vulnerability exists in this plugin, but do not provide concrete exploit details, affected file paths, or exact root-c...

CVE-2020-7206

HP nagios plugin for iLO nagios-plugins-hpilo v1.50 and earlier has a php code injection vulnerability...

CVE-2020-7206: Improper Neutralization of Special Elements used in an OS Command

HP nagios plugin for iLO nagios-plugins-hpilo v1.50 and earlier has a php code injection vulnerability...

PT-2020-19465

Name of the Vulnerable Software and Affected Versions HP nagios plugin for iLO versions 1.50 and earlier Description The issue is related to a php code injection vulnerability. Recommendations For versions 1.50 and earlier, update to a version later than 1.50 to resolve the issue...

PT-2020-12608

Name of the Vulnerable Software and Affected Versions LibreHealth EMR version 2.0.0 Description The issue allows for Local File Inclusion, enabling the inclusion and execution of arbitrary PHP code within the application. Recommendations For LibreHealth EMR version 2.0.0, at the moment, there is ...

CVE-2020-11084

In iPear, the manual execution of the eval function can lead to command injection. Only PCs where commands are manually executed via "For Developers" are affected. This function allows executing any PHP code within iPear which may change, damage, or steal data files from the PC...

CVE-2020-11084

In iPear, the manual execution of the eval function can lead to command injection. Only PCs where commands are manually executed via "For Developers" are affected. This function allows executing any PHP code within iPear which may change, damage, or steal data files from the PC...

Command injection

In iPear, the manual execution of the eval function can lead to command injection. Only PCs where commands are manually executed via "For Developers" are affected. This function allows executing any PHP code within iPear which may change, damage, or steal data files from the PC...

CVE-2020-11084 Command Injection in iPear

In iPear, the manual execution of the eval function can lead to command injection. Only PCs where commands are manually executed via "For Developers" are affected. This function allows executing any PHP code within iPear which may change, damage, or steal data files from the PC...

CVE-2020-11084

In iPear, the manual execution of the eval function can lead to command injection. Only PCs where commands are manually executed via "For Developers" are affected. This function allows executing any PHP code within iPear which may change, damage, or steal data files from the PC...

CVE-2020-11546

SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. An unauthenticated remote attacker can exploit this behavior to execute arbitrary PHP code via Code Injection...

CVE-2020-11546

SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. An unauthenticated remote attacker can exploit this behavior to execute arbitrary PHP code via Code Injection...

PT-2020-12681

Name of the Vulnerable Software and Affected Versions SuperWebMailer version 7.21.0.01526 Description The issue allows an unauthenticated remote attacker to execute arbitrary PHP code via code injection in the Language parameter of the "mailingupgrade.php" endpoint. Recommendations For...

PT-2020-12541

Name of the Vulnerable Software and Affected Versions iPear affected versions not specified Description The manual execution of the eval function in iPear can lead to command injection, allowing the execution of any PHP code within iPear. This may result in data change, damage, or theft from the...

Impress CMS 1.4.0 Code Execution / SQL Injection

Author: AppleBois Homepage: https://sourceforge.net/projects/impresscms/ Affected Version: 1.4.0 Remote Code Execution or Sql Injection Authenticated user can make use of the AutoTask feature to execute php code, it allow authenticated user execute their own php code, which can cause SQL Injectio...

Impress CMS 1.4.0 Code Execution / SQL Injection Vulnerabilities

Impress CMS version 1.4.0 has an issue where an authenticated user can make use of the AutoTask feature to execute php code, allowing for remote SQL injection and remote code execution. Author: AppleBois Homepage: https://sourceforge.net/projects/impresscms/ Affected Version: 1.4.0 Remote Code...