613 matches found
CVE-2018-16763-FuelCMS-1.4.1-RCE
CVE-2018-16763 - FuelCMS = 1.4.1 RCE Exploit to trigger RCE for CVE-2018-16763 on FuelCMS = 1.4.1 and interactive shell. Features Automatically uploads a php webshell API in FuelCMS using CVE-2018-16763. Execute system commands via an API with ?action=exec. Download files from the remote system t...
CVE-2018-16763-FuelCMS-1.4.1-RCE
CVE-2018-16763-FuelCMS-1.4.1-RCE La versión original de este exploit está aquí: https://www.exploit-db.com/exploits/50477 Lo modifiqué para que funcione en Vulnerability Capstone de TryHackMe...
CVE-2018-16763
CVE 2018-16763 एक्सप्लॉइट परिचय FUEL CMS 1.4.1 पर PreAuth-RCE डेमो संदर्भ: https://nvd.nist.gov/vuln/detail/CVE-2018-16763 https://www.exploit-db.com/exploits/47138...
CVE-2018-16763
CVE-2018-16763 Título del Exploit: fuel CMS 1.4.1 - Ejecución Remota de Código Script Python3 - 💻 Este script fue desarrollado por h3x0v3rl0rd...
CVE-2018-16763
CVE-2018-16763 Fuel CMS 1.4.1 - Remote Code Execution - Python 3.x Original Script : Exploit-DB...
CVE-2020-13768
🐞 CVE-2020-13768: MiniShare 1.4.1 - Stack-Based Buffer Overflow Stack-based buffer overflow in MiniShare 1.4.1 reachable through a single HTTP PUT request. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context and affected software About the vulnerability...
CVE-2026-78292
Unauthenticated PHP Object Injection in Hash Form = 1.4.1 versions...
EUVD-2026-66946
Unauthenticated PHP Object Injection in Hash Form = 1.4.1 versions...
CVE-2026-70436
Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check 1.4.0 and earlier or performs an improper permission check 1.4.1 when providing access to externally-managed workspaces through the workspace browser, allowing attackers with Overall/Read permission to...
CLSA-2026-1780966318 TuxCare security update for jspdf (15 CVEs)
TuxCare rebuilt jspdf to address 15 CVEs. Fixed in 1.4.1-tuxcare.1...
CLSA-2026-1772496676 TuxCare security update for d3-color (15 CVEs)
TuxCare rebuilt d3-color to address 15 CVEs. Fixed in 1.4.1-tuxcare.1...
CVE-2026-46410 FileBrowser Quantum: unauthenticated user share share info
FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may leak some sensitive info, such as source and path. Versions 1.3.2-stable and 1.4.1-beta fix the issue. No known workarounds are available...
CVE-2026-16222 1Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgery
A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1. This issue affects some unknown processing of the file backend/crm/src/main/java/cn/cordys/crm/integration/sso/service/TokenService.java of the component Third Party Endpoint. Performing a manipulation of the argument mkAddress result...
GHSA-52MM-H59V-F3C7 earmark: Stored XSS via unescaped HTML attribute values
Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':makeatt1/2 in lib/earmark/transform.ex splices attribute values verbatim between two literal " bytes: ...
CVE-2026-48591 Stored XSS via unescaped HTML attribute values in earmark
Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':makeatt1/2 in lib/earmark/transform.ex splices attribute values verbatim between two literal " bytes: ...
CVE-2026-39577
Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...
CVE-2026-27429
Unauthenticated PHP Object Injection in Nifty = 1.4.1 versions...
CVE-2026-40738
The CVE-2026-40738 entry concerns the WordPress Eldon theme (versions <= 1.4.1) with an unauthenticated PHP Object Injection vulnerability. Connected documents confirm the affected product (Eldon theme), the vulnerable component (PHP object deserialization paths in Eldon