ProcessMaker Plugin Upload

This module will generate and upload a plugin to ProcessMaker resulting in execution of PHP code as the web server user. Credentials for a valid user account with Administrator roles is required to run this module. This module has been tested successfully on ProcessMaker versions 1.6-4276, 2.0.23...

vuln in WordPress plugin Upload File(UP)

New Advisory: Wordpress Plugin Upload FileUP Remote SQL Injection --------------------Summary---------------- Software: Upload File WordPress Plugin Critical Level: Moderate Type: SQL Injection Class: Remote Status: Unpatched PoC/Exploit: Not Available Solution: Not Available Discovered by:...

CVE-2003-0372

CVE-2003-0372 affects Nessus prior to 2.0.6, specifically the libnasl component. The root cause is a signed integer handling issue that allows a local user with plugin upload privileges to trigger a denial of service (core dump) and potentially execute arbitrary code by providing a negative argum...

Nessus 2.0.x - LibNASL Arbitrary Code Execution

Nessus 2.0.x - LibNASL Arbitrary Code Execution source: https://www.securityfocus.com/bid/7664/info Nessus has reported that various flaws have been discovered in the 'libnasl' library used by the Nessus application. As a result, a malicious NASL script may be able to break outside of the...