Lucene search
+L

86 matches found

Metasploit
Metasploit
•added 2020/12/27 12:00 a.m.•161 views

Klog Server authenticate.php user Unauthenticated Command Injection

This module exploits an unauthenticated command injection vulnerability in Klog Server versions 2.4.1 and prior. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the...

10CVSS9.1AI score0.88099EPSS
SaveExploits9
zdt
zdt
•added 2020/07/23 12:00 a.m.•724 views

Online Book Store 1.0 Code Execution Exploit

Exploit for php platform in category web applications !/usr/bin/env python3 Exploit Title: Online Book Store 1.0 - Unauthenticated Remote Code Execution modified by cesgami Exploit Author: Tib3rius Vendor Homepage:...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/06/26 12:00 a.m.•53 views

PHP 7.3.x < 7.3.17 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is prior to 7.2.30, 7.3.x prior to 7.3.17, or 7.4.x prior to 7.4.5. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds read error exists in urldecode due to improper data validation checks. An...

7.5CVSS7.8AI score0.04311EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2020/06/26 12:00 a.m.•48 views

PHP 7.2.x < 7.2.30 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is prior to 7.2.30, 7.3.x prior to 7.3.17, or 7.4.x prior to 7.4.5. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds read error exists in urldecode due to improper data validation checks. An...

7.5CVSS7.8AI score0.04311EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2020/06/22 12:00 a.m.•283 views

Student Enrollment 1.0 Remote Code Execution

Exploit Title: Student Enrollment 1.0 - Unauthenticated Remote Code Execution Date: 2020-06-22 Exploit Author: Selim Enes 'Enesdex' Karaduman Vendor Homepage: https://www.sourcecodester.com/php/14281/online-student-enrollment-system-using-phpmysqli.html Version: 1.0 Tested on: Windows 10 /...

0.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/04/23 12:00 a.m.•173 views

PHP 7.2.x < 7.2.30 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP running on the remote web server is 7.2.x prior to 7.2.30. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds read error exists in urldecode due to improper data validation checks. An attacker can exploit...

7.5CVSS6.6AI score0.04311EPSS
SaveExploits1References4
Packet Storm
Packet Storm
•added 2019/09/24 12:00 a.m.•996 views

vBulletin 5.x Pre-Auth Remote Code Execution

!/usr/bin/python vBulletin 5.x 0day pre-auth RCE exploit This should work on all versions from 5.0.0 till 5.5.4 Google Dorks: - site:.vbulletin.net - "Powered by vBulletin Version 5.5.4" import requests import sys if lensys.argv != 2: sys.exit"Usage: %s " % sys.argv0 params =...

0.2AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/10/15 12:00 a.m.•42 views

FLIR AX8 Thermal Camera 1.32.16 - Remote Code Execution

FLIR AX8 Thermal Camera 1.32.16 - Remote Code Execution Exploit Title: FLIR AX8 Thermal Camera 1.32.16 - Remote Code Execution Author: Gjoko 'LiquidWorm' Krstic @zeroscience Date: 2018-10-14 Vendor: FLIR Systems, Inc. Product web page: https://www.flir.com Affected version: Firmware: 1.32.16,...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2018/10/15 12:00 a.m.•563 views

FLIR AX8 Thermal Camera 1.32.16 - Remote Code Execution

Exploit Title: FLIR AX8 Thermal Camera 1.32.16 - Remote Code Execution Author: Gjoko 'LiquidWorm' Krstic @zeroscience Date: 2018-10-14 Vendor: FLIR Systems, Inc. Product web page: https://www.flir.com Affected version: Firmware: 1.32.16, 1.17.13, OS: necov1.8-0-g7ffe5b3, Hardware: Flir Systems Ne...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2017/03/27 12:00 a.m.•76 views

EyesOfNetwork (EON) 5.0 - Remote Code Execution

EyesOfNetwork EON 5.0 - Remote Code Execution CVE-2017-6087 EON 5.0 Remote Code Execution Description EyesOfNetwork "EON" is an OpenSource network monitoring solution. Remote Code Execution authenticated The Eonweb code does not correctly filter arguments, allowing authenticated users to execute...

6.5CVSS0.2AI score0.0718EPSS
SaveExploits6
Prion
Prion
•added 2017/01/28 12:59 p.m.•22 views

Command injection

The Sophos Web Appliance version 4.2.1.3 is vulnerable to two Remote Command Injection vulnerabilities affecting its web administrative interface. These vulnerabilities occur in the MgrReport.php /controllers/MgrReport.php component responsible for blocking and unblocking IP addresses from...

9CVSS7.8AI score0.19462EPSS
SaveExploits6References4Affected Software1
Prion
Prion
•added 2014/07/07 2:55 p.m.•37 views

Design/Logic Flaw

The 1 shellexec function in lib/util/MiqSshUtilV1.rb and 2 tempcmdfile function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine CFME before 5.2.4.2 allow local users to execute arbitrary commands via a symlink attack on a temporary file with a predictable name...

6.9CVSS7.5AI score0.00354EPSS
SaveExploits0References3Affected Software1
Exploit DB
Exploit DB
•added 2013/08/02 12:00 a.m.•28 views

PineApp Mail-SeCure - 'livelog.html' Arbitrary Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'PineApp Mail-SeCure livelog.html...

5.3AI score
SaveExploits0
zdt
zdt
•added 2013/07/30 12:00 a.m.•31 views

PineApp Mail-SeCure livelog.html Arbitrary Command Execution

This Metasploit module exploits a command injection vulnerability on PineApp Mail-SeCure 3.70. The vulnerability exists on the livelog.html component, due to the insecure usage of the shellexec php function. This Metasploit module has been tested successfully on PineApp Mail-SeCure 3.70. This fil...

7.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2013/07/29 12:00 a.m.•25 views

PineApp Mail-SeCure ldapsyncnow.php Arbitrary Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'PineApp Mail-SeCure ldapsyncnow.php...

0.4AI score
SaveExploits0
Metasploit
Metasploit
•added 2013/07/26 12:00 a.m.•27 views

PineApp Mail-SeCure ldapsyncnow.php Arbitrary Command Execution

This module exploits a command injection vulnerability on PineApp Mail-SeCure 3.70. The vulnerability exists on the ldapsyncnow.php component, due to the insecure usage of the shellexec php function. This module has been tested successfully on PineApp Mail-SeCure 3.70. Module Options msf use...

5.3AI score
SaveExploits0
seebug.org
seebug.org
•added 2012/10/08 12:00 a.m.•22 views

MyBB Remote Command Execution

No description provided by source. Exploit Title : Mybb All Versions Remote Command Execution Author : Nafsh Discovered By : Tapco Security & Research Lab Date : 3 Oct 2012 Home : http://Sec-Lab.Tap-Co.Net Contact : [email protected] Source : http://www.mybb.com/download/latest file :...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2012/10/04 12:00 a.m.•41 views

WordPress Remote Command Execution

Author : Nafsh Discovered By : Tapco Security & Research Lab Date : 3 Oct 2012 Home : http://Sec-Lab.Tap-Co.Net Contact : [email protected] Source : http://core.svn.wordpress.org/trunk/wp-includes/Text/Diff/Engine/shell.php Source Of Bug : $fp = fopen$tofile, 'w'; fwrite$fp, implode"\n",...

0.1AI score
SaveExploits0
myhack58
myhack58
•added 2011/04/26 12:00 a.m.•39 views

PHP code execution vulnerability references summary-vulnerability warning-the black bar safety net

A code execution function In PHP you can execute the Code of the function. Such as eval , assert , theand system and exec and shellexec and passthru and escapeshellcmd and pcntlexec , etc. demo code 1.1: The second file contains the code injection The file containing the function in the specific...

SaveExploits0
exploitpack
exploitpack
•added 2011/01/17 12:00 a.m.•29 views

PHP-Fusion Teams Structure Infusion Addon - SQL Injection

PHP-Fusion Teams Structure Infusion Addon - SQL Injection Exploit Title: PHP-fusion Team Structure Infusion All versions SQL injection Date: 16-1-2010 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=120 Version: PHP-fusion 7.01..03, TeamStructu...

0.2AI score
SaveExploits0
Rows per page
Query Builder