419 matches found
CVE-2021-41568 Tad Web - Improper Authorization
Tad Web is vulnerable to authorization bypass, thus remote attackers can exploit the vulnerability to use the original function of viewing bulletin boards and uploading files in the system...
Covert-Tube - Youtube As Covert-Channel - Control Systems Remotely And Execute Commands By Uploading Videos To Youtube
A program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener, emulating some malware I was reading about. It allows to create videos with frames formed of simple text, QR codes with cleartext or QR codes using AES encryption. Create a vid...
Remote code execution
Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload function in order to exploit the vulnerability...
CVE-2021-3832 Integria IMS Remote Code Execution
Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload function in order to exploit the vulnerability...
CVE-2021-3832
CVE-2021-3832 affects Integria IMS 5.0.92 and exposes a Remote Code Execution vulnerability via the AsyncUpload() function, granting unauthenticated network-accessible attackers full code execution through file uploads. The issue is rooted in the upload handling, enabling an attacker to abuse the...
Traffic Offense Management System 1.0 SQL Injection / Remote Code Execution
Exploit Title: Traffic Offense Management System 1.0 - SQLi to Remote Code Execution RCE Unauthenticated Date: 19.08.2021 Exploit Author: Tagoletta Tağmaç Software Link: https://www.sourcecodester.com/php/14909/online-traffic-offense-management-system-php-free-source-code.html Version: 1.0 Tested...
Traffic Offense Management System 1.0 - SQL Injection to Remote Code Execution Exploit
Exploit Title: Traffic Offense Management System 1.0 - SQLi to Remote Code Execution RCE Unauthenticated Exploit Author: Tagoletta Tağmaç Software Link: https://www.sourcecodester.com/php/14909/online-traffic-offense-management-system-php-free-source-code.html Version: 1.0 Tested on: Linux import...
CVE-2021-34066
An issue was discovered in EdgeGallery/developer before v1.0. There is a "Deserialization of yaml file" vulnerability that can allow attackers to execute system command through uploading the malicious constructed YAML file...
Simple Image Gallery 1.0 - Remote Code Execution (Unauthenticated) Exploit
Exploit Title: Simple Image Gallery 1.0 - Remote Code Execution RCE Unauthenticated Exploit Author: Tagoletta Tağmaç Software Link: https://www.sourcecodester.com/php/14903/simple-image-gallery-web-app-using-php-free-source-code.html Version: V 1.0 Tested on: Ubuntu import requests import random...
CVE-2021-37547
In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made...
CVE-2021-37547
CVE-2021-37547 affects JetBrains TeamCity prior to version 2020.2.4, due to insufficient checks during file uploading. Root cause: inadequate validation when uploading files in TeamCity. Impact described in sources as a vulnerability with low attack complexity and network access, no authenticatio...
CVE-2021-37547
In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made...
Sourcegraph 信息泄露漏洞
Sourcegraph is an open source code search and navigation tool from Sourcegraph, Inc. in the United States. Sourcegraph suffers from a security vulnerability that stems from the fact that the site administration area can be accessed by a normal user, with all information and functionality properly...
[SECURITY] Fedora 34 Update: curl-7.76.1-7.fc34
curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
CVE-2020-22249
Remote Code Execution vulnerability in phplist 3.5.1. The application does not check any file extensions stored in the plugin zip file, Uploading a malicious plugin which contains the php files with extensions like PHP,phtml,php7 will be copied to the plugins directory which would lead to the...
Billing System Project 1.0 - Remote Code Execution (Unauthenticated) Exploit
Exploit Title: Billing System Project 1.0 - Remote Code Execution RCE Unauthenticated Exploit Author: Talha DEMİRSOY Software Link: https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html Version: V 1.0 Tested on: Linux & Windows import requests import...
Responsive Tourism Website 3.1 Remote Code Execution
Exploit Title: Responsive Tourism Website 3.1 - Remote Code Execution RCE Unauthenticated Date: 22.06.2021 Exploit Author: Tagoletta Tağmaç Software Link: https://www.sourcecodester.com/php/14838/simple-responsive-tourism-website-using-php-free-source-code.html Version: V 3.1 Tested on: MacOS &...
CVE-2021-24349
The CVE concerns the WordPress plugin “Gallery from files” (versions up to 1.6.0). The vulnerability arises from improper sanitization of user-supplied image filenames when output in an error message, enabling a reflected Cross-Site Scripting (XSS) vulnerability. The issue is compounded by a lack...
Fedora: Security Advisory for curl (FEDORA-2021-eb5b7c53a9)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...