3530 matches found
Elasticsearch_rules
Elasticsearchrules Версия ElasticSearch Detection правил SOC Prime Watcher с некоторыми новыми правилами Corelight Обратите внимание, что некоторые из этих правил следует адаптировать под вашу среду. Чтобы загрузить в Elastic, скачайте ndjson и разверните раздел Security, затем перейдите в Alerts...
CiscoExploit
CiscoExploit Cisco Scan IP/Port/Nom d'Hôte/Démarrage/Version https://www.cnblogs.com/k8gege/p/10679491.html CVE-2019-1821 Exécution de code à distance sur Cisco Prime Infrastructure https://srcincite.io/blog/2019/05/17/panic-at-the-cisco-unauthenticated-rce-in-prime-infrastructure.html Cisco SNMP...
Prime Mover < 1.9.3 - Sensitive Data Exposure
Prime Mover plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.2 via directory listing in the 'prime-mover-export-files/1/' folder. This makes it possible for unauthenticated attackers to extract sensitive data including site and...
CVE-2026-101890
The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescaped sitetitle value in a package's footprint.json file. Attackers can place a crafted package under the...
CVE-2026-101889
The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary directories by importing a crafted WPRIME/TAR package with manipulated tarrootfolder values in wprime-config.json. Attackers can exploit...
CVE-2026-101888
The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP entry names with traversal sequences...
CVE-2026-101890 Prime Mover < 2.2.1 Stored XSS via Package Metadata
The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescaped sitetitle value in a package's footprint.json file. Attackers can place a crafted package under the...
EUVD-2026-90917
The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescaped sitetitle value in a package's footprint.json file. Attackers can place a crafted package under the...
CVE-2026-101890 Prime Mover < 2.2.1 Stored XSS via Package Metadata
The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescaped sitetitle value in a package's footprint.json file. Attackers can place a crafted package under the...
CVE-2026-101890
The Prime Mover plugin for WordPress (versions before 2.2.1 ) is vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is the improper handling of an unescaped site_title value within a package's footprint.json file. An attacker can place a crafted package in the prime-mover-expo...
EUVD-2026-90913
The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary directories by importing a crafted WPRIME/TAR package with manipulated tarrootfolder values in wprime-config.json. Attackers can exploit...
CVE-2026-101889
The Prime Mover plugin for WordPress (versions before 2.2.1 ) is vulnerable to a path traversal vulnerability. The issue stems from insufficient path validation within the computeExtractVariables() and validateImportedSiteVsPackage() functions. An authenticated administrator can exploit this by i...
CVE-2026-101889 Prime Mover < 2.2.1 Path Traversal via wprime-config.json
The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary directories by importing a crafted WPRIME/TAR package with manipulated tarrootfolder values in wprime-config.json. Attackers can exploit...
CVE-2026-101888
The Prime Mover plugin for WordPress (versions before 2.2.1 ) is vulnerable to a Zip Slip path traversal vulnerability. This flaw allows authenticated administrators to write arbitrary files outside the intended extraction directory during a migration ZIP import. The root cause lies in the comput...
CVE-2026-101888 Prime Mover < 2.2.1 Zip Slip Path Traversal File Write
The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP entry names with traversal sequences...
EUVD-2026-90911
The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP entry names with traversal sequences...
CVE-2026-101888 Prime Mover < 2.2.1 Zip Slip Path Traversal File Write
The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP entry names with traversal sequences...
PT-2026-103911
The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP entry names with traversal sequences...
PT-2026-103913
The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescaped site title value in a package's footprint.json file. Attackers can place a crafted package under the...
CVE-2019-3980
CVE-2019-3980 Exploit CVE-2019-3980 écrit en win32/c++ dépendance openssl. Portage de https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcsdwDrvInstrce.py Instructions Ce PoC nécessite des bibliothèques openssl liées statiquement. Placez les includes openssl dans...