11259 matches found
CVE-2024-49286 WordPress SSV Events plugin <= 3.2.7 - Local File Inclusion to RCE vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Jeroen Berkvens SSV Events ssv-events allows PHP Local File Inclusion.This issue affects SSV Events: from n/a through = 3.2.7...
CVE-2024-10131 Remote Code Execution in infiniflow/ragflow
The addllm function in llmapp.py in infiniflow/ragflow version 0.11.0 contains a remote code execution RCE vulnerability. The function uses user-supplied input req'llmfactory' and req'llmname' to dynamically instantiate classes from various model dictionaries. This approach allows an attacker to...
Metasploit Weekly Wrap-Up 10/18/2024
ESC15: EKUwu AD CS continues to be a popular target for penetration testers and security practitioners. The latest escalation technique hence the the ESC in ESC15 was discovered by Justin Bollinger with details being released just last week. This latest configuration flaw has common issuance...
Magento / Adobe Commerce Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CosmicSting: Magento Arbitrary File Read CVE-2024-34102 + PHP Buffer Overflow in the iconv function of glibc CVE-2024-2961', 'Description' = %q...
Docker Desktop < 4.34.3 RCE
The version of Docker installed on the remote host is prior to 4.34.3. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-9348 advisory. - Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view. CVE-2024-9348 Note that Nessus has not...
Docker for Windows < 4.34.3 RCE
The version of Docker Desktop installed on the remote host is prior to 4.34.3. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-9348 advisory. - Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view. CVE-2024-9348 Note that Nessus has...
Remote Desktop client for Windows RCE (October 2024)
The Windows Remote Desktop client for Windows installed on the remote host is missing security updates. It is, therefore, affected by a remote-code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
SofaWiki 3.9.2 Shell Upload
Exploit Title: SofaWiki 3.9.2 - Remote Code Execution RCE via Open Ticket File Upload Date: 10/17/2024 Exploit Author: Chokri Hammedi Vendor Homepage: https://www.sofawiki.com Software Link: https://www.sofawiki.com/site/files/snapshot.zip Version: 3.9.2 Tested on: Windows XP Summary: A remote co...
SolarWinds Web Help Desk < 12.8.3 HF 3 Java Deserialization RCE
The version of SolarWinds Web Help Desk installed on the remote host is prior to 12.8.3 HF3. It is, therefore, affected by a Java deserialization remote-code execution vulnerability, that, if exploited, would allow an attacker to run commands on the host machine. Note that Nessus has not tested f...
CVE-2024-9348
Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view...
CVE-2024-9348 Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view
Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view...
CVE-2024-9348
Docker Desktop is affected by CVE-2024-9348 on versions prior to 4.34.3. The issue is a remote code execution (RCE) vulnerability caused by unsanitized GitHub source links in the Build view, allowing an attacker to execute arbitrary code. Public sources across Nessus plug‑ins, CVELIST, CNNVD, and...
CVE-2024-47649 WordPress Iconize plugin <= 1.2.4 - Remote Code Execution (RCE) vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in THATplugin Iconize iconize.This issue affects Iconize: from n/a through = 1.2.4...
CVE-2024-48027 WordPress External featured image from bing plugin <= 1.0.2 - Remote Code Execution (RCE) vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in xaraartech External featured image from bing external-featured-image-from-bing allows Upload a Web Shell to a Web Server.This issue affects External featured image from bing: from n/a through = 1.0.2...
CVE-2024-48042 WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability
Deserialization of Untrusted Data vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows Command Injection.This issue affects Contact Form by Supsystic: from n/a through = 1.7.28...
CVE-2024-48042 WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Supsystic Contact Form by Supsystic allows Command Injection.This issue affects Contact Form by Supsystic: from n/a through 1.7.28...
Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus
ADSelfService-Plus-RCE-CVE-2021-40539 ADSelfService Plus RCE...
CVE-2023-32188
A user can reverse engineer the JWT token JSON Web Token used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE...