CVE-2018-19424

ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files...

Windows Persistent Service Installer

This Module will generate and upload an executable to a remote host. It will create a new service which will start the payload whenever the service is running. Admin or system privilege is required. Module Options msf use exploit/windows/persistence/service msf undefinedservice show actions...

ASUSTOR Data Master Path Traversal Vulnerability (CNVD-2018-17897)

ASUSTOR Data Master ADM is a dedicated operating system for ASUSTOR NAS storage devices from ASUSTOR. A path traversal vulnerability exists in ASUSTOR ADM 3.1.5 and prior versions. A remote attacker can exploit this vulnerability to upload files to an arbitrary location and potentially execute co...

Remote code execution

The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed file types, as demonstrated by a v1/remoteupload request with a .php filename and the image/jpeg content type...

CVE-2018-0571

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers with a site operator privilege to upload arbitrary files...

CVE-2018-12519

An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file that contains a JavaScript payload to steal a user's credentials...

UBUNTU-CVE-2011-4183

A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16...

CVE-2011-4183 open build service allows anyone to upload rpms

A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16...

Pluck PHP Code Upload and Execution Vulnerability

Pluck is a simple content management system CMS written in PHP. A security vulnerability exists in the /data/inc/images.php file in Pluck versions prior to 4.7.7-dev2. A remote attacker can exploit this vulnerability by uploading an image/jpeg type .htaccess file to upload and execute arbitrary P...

BigTree CMS <= 4.2.22 Remote Upload & Code Execution Vulnerability

BigTree CMS is prone to a remote upload and code execution vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-10469

b3log Symphony aka Sym 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name parameter to the /upload URI...

CVE-2018-4840

A vulnerability has been identified in DIGSI 4 All versions V4.92, EN100 Ethernet module DNP3 variant All versions V1.05.00, EN100 Ethernet module IEC 104 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.30, EN100 Ethernet module Modbus TCP variant All versions, EN100...

CVE-2018-4840

CVE-2018-4840 affects Siemens DIGSI 4 and EN100 Ethernet modules (DNP3, IEC 104, IEC 61850, Modbus TCP, PROFINET IO). The issue allows an unauthenticated remote attacker to upload a modified device configuration that overwrites the access-authorization passwords. Affected products include DIGSI 4...

CVE-2016-8515

A remote malicious file upload vulnerability in HPE Version Control Repository Manager VCRM was found. The problem impacts all versions prior to 7.6...

The vulnerability of the tickets.php script in the osTicket customer support system, which allows a perpetrator to upload malicious files.

The vulnerability of the tickets.php script in the osTicket customer support system is related to an incorrect mechanism for checking file content during loading. Exploiting this vulnerability allows a malicious actor to upload malicious files remotely...

Toplist 2 SQL Injection / Backdoor Account / Shell Upload

============================================================================ | Title : toplist v 2 Backdoor account Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais V.Pro | | Version : v 2 | | Vendor : http://wmscripti.com | | Dork :...

Meinberg LANTIME Web Configuration Utility Directory Traversal Vulnerability

Meinberg LANTIME is an NTP time server from Meinberg, Germany.Web Configuration Utility is one of the web configuration utilities. A directory traversal vulnerability exists in the Upload Groupkey function of the Web Configuration Utility in Meinberg LANTIME with firmware version 6.24.004. A remo...

CVE-2014-3150

Livebox 1.1 allows remote authenticated users to upload arbitrary configuration files, download the configuration file, or obtain sensitive information via crafted Javascript...

Huawei OceanStor UDS Information Disclosure Vulnerability

Huawei OceanStor UDS is a high-density storage node and distributed storage system based on ARM architecture from Huawei, China. A security vulnerability exists in the XML interface of Huawei OceanStor UDS V100R002C01SPC101 and earlier versions. A remote attacker can exploit this vulnerability by...

Arbitrary file upload vulnerability in the action/fileUpload.asp file of the Access Specialist management system

Despatch Access Specialist Management System is a CATI software that integrates telephone access, call center, and web survey into one; a CATI software that provides hosted services with "Cloud Computing" and "SaaS Model". An arbitrary file upload vulnerability exists in the action/fileUpload.asp...