30 matches found
PluckCMS 4.7.10 - Unrestricted File Upload
Exploit Title: PluckCMS 4.7.10 - Unrestricted File Upload Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/pluck-cms/pluck/ Software Link: https://github.com/pluck-cms/pluck/ Version: 4.7.10 Tested on: Windows CVE : CVE-2020-20969 Proof Of Concept GET...
EUVD-2011-3751
Malware in sbrugna...
EUVD-2018-3262
Malware in sbrugna...
EUVD-2011-3697
Malware in sbrugna...
EUVD-2018-11239
Malware in sbrugna...
EUVD-2006-7031
Malware in sbrugna...
EUVD-2012-1655
Malware in sbrugna...
EUVD-2011-3696
Malware in sbrugna...
EUVD-2012-4329
Malware in sbrugna...
EUVD-2007-4169
Malware in sbrugna...
EUVD-2006-1166
Malware in sbrugna...
EUVD-2006-2697
Malware in sbrugna...
EUVD-2024-32282
Malicious code in bioql PyPI...
EUVD-2022-1482
Malicious code in bioql PyPI...
EUVD-2022-44043
Malicious code in bioql PyPI...
WordPress PrivateContent-Mail Actions File Inclusion Vulnerability
WordPress PrivateContent-Mail Actions is the name of the plugin or feature module for mail actions and member management. WordPress PrivateContent-Mail Actions suffers from a file inclusion vulnerability that stems from improper file inclusion control, which can be exploited by an attacker to cau...
CVE-2025-24760 WordPress Sofass theme <= 1.3.4 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in goalthemes Sofass sofass allows PHP Local File Inclusion.This issue affects Sofass: from n/a through = 1.3.4...
CVE-2011-3808
The Bug Genie 2.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/svnintegration/config.inc.php and certain other files...
CVE-2011-3804
SweetRice 0.7.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugin/tinymce/plugins/advimage/images.php...
CVE-2011-3706
ATutor 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by users/toolsettings.inc.php and certain other files...