CVE-2018-18387

CVE-2018-18387 playSMS = 1.4.2 - 権限昇格 TMHC TEAMは、playSMS/web/init.phpを介した権限昇格につながる脆弱性を発見しました。これはシステム全体の侵害につながる可能性があります。...

playSMS <1.4.3 - Remote Code Execution

PlaySMS before version 1.4.3 is susceptible to remote code execution because it double processes a server-side template. id: CVE-2020-8644 info: name: playSMS 1.4.3 - Remote Code Execution author: dbrwsky severity: critical description: PlaySMS before version 1.4.3 is susceptible to remote code...

CVE-2021-40373

CVE-playsms playsms 1.4.3에는 잠재적 공격자가 원격 코드 실행을 수행할 수 있게 하는 취약점이 있습니다. RCE셸 재현 방법: https://playsms.org/ docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms admin:admin으로 로그인 http://127.0.0.1/index.php?app=main&inc=coremainconfig&op=mainconfigtabs-information-page 공격자 머신에서 악성...

CVE-2020-8644-PlaySMS-1.4

CVE-2020-8644-PlaySMS-1.4 PlaySMS 1.4.3 미만 버전을 공격하는 Python 스크립트 실행 nc로 포트 열기: 그리고 exploit.py를 실행합니다: ./exploit.py 익스플로잇 변경하기 exploit.py가 생성하는 리버스 셸을 변경하고 싶을 수 있습니다. 이를 위해 exploit.py의 1419번째 줄에 있는 createrevshellencoded 함수를 변경하면 됩니다: def createrevshellencodedlhost,lport: 필요하면 변경하세요 revshell = "/?ph...

CVE-2017-9101

PlaySMS 1.4 인증된 원격 코드 실행 ExploitDB에 설명된 Phonebook CSV 업로드 문제를 통한 원격 코드 실행의 간단한 방법입니다. 단일 명령 실행: % python3 playsmshell.py --url http://localhost/playsms --password playwithsms -c 'id' Grabbing CSRF token for login Attempting to login as admin + Logged in! Grabbing CSRF token for phonebook import...

EUVD-2008-5851

Malware in sbrugna...

EUVD-2004-2255

Malware in sbrugna...

EUVD-2018-10117

Malware in sbrugna...

EUVD-2009-0112

Malware in sbrugna...

EUVD-2005-4427

Malware in sbrugna...

EUVD-2020-7146

Malware in sbrugna...

EUVD-2024-49452

Malicious code in bioql PyPI...

EUVD-2024-47563

Malicious code in bioql PyPI...

EUVD-2024-47562

Malicious code in bioql PyPI...

EUVD-2024-46995

Malicious code in bioql PyPI...

EUVD-2024-47375

Malicious code in bioql PyPI...

EUVD-2022-49812

Malicious code in bioql PyPI...

MAL-2025-29390 Malicious code in playsms (npm)

The package playsms was found to contain malicious code...

Malicious code in playsms (npm)

The package playsms was found to contain malicious code...

CVE-2024-6251

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main=featurephonebook=phonebooklist of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site scripting...