1399 matches found
Calavera UpLoader 3.5 - (FTP Logi) Denial of Service (PoC + SEH Overwrite) Exploit
Exploit Title: Calavera UpLoader 3.5 - 'FTP Logi' Denial of Service PoC + SEH Overwrite Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/463c9e7fe9a39888d3c01bc9ad756bba-UpSetup.exe Version: 3.5 Tested on: Windows 7 x86 Blog: https://whitecr0wz.github.io/ Sadly enough, this...
Calavera UpLoader 3.5 Denial Of Service
Exploit Title: Calavera UpLoader 3.5 - 'FTP Logi' Denial of Service PoC + SEH Overwrite Date: 2020-07-20 Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/463c9e7fe9a39888d3c01bc9ad756bba-UpSetup.exe Version: 3.5 Tested on: Windows 7 x86 Blog: https://whitecr0wz.github.io/ Sad...
Calavera UpLoader 3.5 - 'FTP Logi' Denial of Service (PoC + SEH Overwrite)
Exploit Title: Calavera UpLoader 3.5 - 'FTP Logi' Denial of Service PoC + SEH Overwrite Date: 2020-07-20 Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/463c9e7fe9a39888d3c01bc9ad756bba-UpSetup.exe Version: 3.5 Tested on: Windows 7 x86 Blog: https://whitecr0wz.github.io/ Sad...
@bigfishtv/tank-form-ui (>=1.1.0 <=1.10.2), @dicdikshaorg/resource-library (=0.0.20) +68 more potentially affected by unknown CVE via fine-uploader (>=5.12.0 <=5.16.2)
fine-uploader NPM version =5.12.0, =1.1.0, =0.0.1, =0.0.7, =0.2.8, =0.3.1, =0.3.97, =0.3.100, =0.3.112, =0.3.80, =0.3.2, =0.3.2, =0.3.82, =0.3.80, =1.0.1-alpha.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-FINEUPLOADER-585902...
Prototype Pollution
Overview fine-uploader is a npm package for upload. Note: This project is no longer maintained and the the package should be considered deprecated. Affected versions of this package are vulnerable to Prototype Pollution. Given a value such as proto, this value is used by the extend function witho...
Users with Overall/Read access could enumerate credentials IDs in fortify-on-demand-uploader
fortify-on-demand-uploader provides a list of applicable credentials IDs to allow users configuring the plugin to select the one to use. This functionality does not correctly check permissions in fortify-on-demand-uploader 6.0.0 and earlier, allowing any user with Overall/Read permission to get a...
WordPress Drag And Drop Multi File Uploader Remote Code Execution
This Metasploit module exploits a file upload feature of Drag and Drop Multi File Upload - Contact Form 7 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wordpress Drag and Drop Multi File...
Malicious Package
Overview asset-uploader is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using asset-upload...
Malicious Package
Overview bbs-uploader is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using bbs-uploader...
Malicious Package
Overview archive-uploader is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...
Open Upload Cross-Site Scripting Vulnerability
Open Upload is a PHP-based, extensible, open source application for file uploading and downloading. A cross-site scripting vulnerability exists in Open Upload 0.4.3 and prior versions. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An attacker ca...
Horde Groupware Webmail Edition 5.2.22 - PHAR Loading Exploit
Exploit for php platform in category web applications exploit-phar-loading.py !/usr/bin/env python3 from horde import Horde import requests import subprocess import sys TEMPDIR = '/tmp' WWWROOT = '/var/www/html' if lensys.argv ' sys.exit1 baseurl = sys.argv1 username = sys.argv2 password =...
PT-2020-2203
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 10.0.474 Description The issue is related to the deserialization of untrusted data in the getChartImage method of the FileStorage class, which is associated with the CewolfServlet and...
CVE-2020-5237
Multiple relative path traversal vulnerabilities in the oneup/uploader-bundle before 1.9.3 and 2.1.5 allow remote attackers to upload, copy, and modify files on the filesystem potentially leading to arbitrary code execution via the 1 filename parameter to BlueimpController.php; the 2 dzchunkindex...
CVE-2020-5237
CVE-2020-5237 : Multiple relative path traversal vulnerabilities in the OneupUploaderBundle (oneup/uploader-bundle) before versions 1.9.3 and 2.1.5. An attacker can manipulate various upload parameters (BlueimpController.php, DropzoneController.php, FineUploaderController.php, MooUploadController...
chhyun-utils (>=1.0.12 <=1.0.39), jotunheimr (>=1.11.0 <=1.12.1) +4 more potentially affected by CVE-2019-10788 via im-metadata (>=2.1.1 <=3.0.1)
im-metadata NPM version =2.1.1, =1.0.12, =1.11.0, =1.0.0, =0.0.1, =2.0.2, =2.0.3 - wn-s3-uploader =1.0.0 Source cves: CVE-2019-10788 Source advisory: SNYK:JS-IMMETADATA-544184...
chhyun-utils (>=1.0.12 <=1.0.39), jotunheimr (>=1.11.0 <=1.12.1) +4 more potentially affected by CVE-2019-10787 via im-resize (>=2.0.2 <=2.3.2)
im-resize NPM version =2.0.2, =1.0.12, =1.11.0, =1.0.0, =0.0.1, =2.0.2, =2.0.3 - wn-s3-uploader =1.0.0 Source cves: CVE-2019-10787 Source advisory: SNYK:JS-IMRESIZE-544183...
Unspecified Vulnerability in CKEditor Image Uploader and Browser
CKEditor is a set of open source, web-based text editor. Image Uploader and Browser is one of the image upload and download plugin. A security vulnerability exists in the pluginconfig.php file in versions of Image Uploader and Browser prior to 4.1.9 used in CKEditor, which stems from the program...
