CVE-2024-1433 KDE Plasma Workspace Theme File eventpluginsmanager.cpp enabledPlugins path traversal

A vulnerability, which was classified as problematic, was found in KDE Plasma Workspace up to 5.93.0. This affects the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the component Theme File Handler. The manipulation of the argument pluginI...

PT-2024-18043 · Kde · Kde Plasma Workspace

Name of the Vulnerable Software and Affected Versions: KDE Plasma Workspace versions up to 5.93.0 Description: A problematic vulnerability was found in KDE Plasma Workspace, affecting the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the...

typecho 跨站脚本漏洞

typecho is a PHP blogging platform for typecho personal developers that is simple and powerful. typecho 1.2.1 version of a cross-site scripting vulnerability, the vulnerability stems from the file /admin/options-theme.php on the lack of effective user-supplied data filtering and escaping, an...

Pluck 代码问题漏洞

Pluck is a content management system CMS developed using the PHP language. A security vulnerability exists in Pluck CMS version 4.7.10-dev2. An attacker can exploit this vulnerability to execute arbitrary code and access sensitive information via the theme.php file...

Ghost Directory Traversal Vulnerability

Ghost is an open source content management system . Ghost suffers from a directory traversal vulnerability that stems from a lack of validity checking of paths in frontend/web/middleware/static-theme.js when processing directory requests, which can be exploited by an attacker to read arbitrary...

CVE-2022-41477

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

CVE-2020-21523

A Server-Side Freemarker template injection vulnerability in halo CMS v1.1.3 In the Edit Theme File function. The ftl file can be edited. This is the Freemarker template file. This file can cause arbitrary code execution when it is rendered in the background. exp: $test"touch /tmp/freemarkerPwned...

CVE-2019-1010124

WebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting XSS. The impact is: XSS to RCE via editing theme files in WordPress. The component is: admin/partials/woo-feed-manage-list.php:63. The attack vector is: Administrator must be logged in...

Code execution vulnerability in Axublog ad/theme.php file

Axublog is a PHP personal blog system. A code execution vulnerability exists in the Axublog ad/theme.php file. The vulnerability is due to the program failing to filter the parameters passed, an attacker can exploit the vulnerability to construct a specially crafted file, upload a shell, and obta...

CVE-2016-6167

Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 UxTheme.dll or 2 ntmarta.dll file in the current working directory...

Nextcloud: WordPress <= 4.6.1 Stored XSS Via Theme File

Hello Team, Description:- Vulnerable code is located at /wp-admin/includes/class-theme-installer-skin.php POC:- https://nextcloud.com/readme.html F151887 FIX:- Upgrade wordpress to latest Refer:- https://wpvulndb.com/vulnerabilities/8718 https://www.mehmetince.net/low-severity-wordpress/ Attack...

CVE-2016-9268

Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified...

CVE-2016-9268

Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified...

WordPress <= 4.6.1 use the theme file to trigger stored XSS vulnerability analysis-vulnerability warning-the black bar safety net

Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-10-08 0x00 vulnerability overview 1. Vulnerability description WordPress is a PHP and MySQL as a platform free and open source blogging software and content management systems, recently researchers found that in their=4.6.1 version, by...

Wordpress <= 4.6.1 Triggers Stored XSS Vulnerability Using Theme Files

WordPress is a free and open source blogging software and content management system using PHP and MySQL as its platform. A backend stored XSS vulnerability can be exploited by uploading maliciously constructed theme files in Wordpress = version 4.6.1. A backend stored XSS vulnerability can be...

Notepad++ 6.7.3 - Crash PoC

Exploit for windows platform in category dos / poc Title: Notepad++ - Crash Date: 10/07/2015 Author: Rahul Pratap Singh @0x62626262 Vendor Homepage: https://notepad-plus-plus.org Download: https://notepad-plus-plus.org/download/v6.7.3.html Version: v6.7.3 Tested on: WindowsXPx86 & Windows7x86...

Notepad++ 6.7.3 - Crash (PoC)

Notepad++ 6.7.3 - Crash PoC Title: Notepad++ - Crash Date: 10/07/2015 Author: Rahul Pratap Singh @0x62626262 Vendor Homepage: https://notepad-plus-plus.org Download: https://notepad-plus-plus.org/download/v6.7.3.html Version: v6.7.3 Tested on: WindowsXPx86 & Windows7x86 Incorrect theme file...

MS13-071 Microsoft Windows Theme File Handling Arbitrary Code Execution

No description provided by source...

Microsoft Windows Theme File Remote Code Execution - Ver2 (CVE-2013-0810)

A code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to improper handling of specially crafted Windows Theme file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Theme File Handling - Arbitrary Code Execution (MS13-071) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS13-071 Microsof...