Lucene search
K

2189 matches found

Vulnrichment
Vulnrichment
added 2025/04/09 4:9 p.m.5 views

CVE-2025-32576 WordPress WP shop plugin <= 2.6.0 - CSRF to Arbitrary File Upload vulnerability

Cross-Site Request Forgery CSRF vulnerability in Agence web Eoxia - Montpellier WP shop allows Upload a Web Shell to a Web Server. This issue affects WP shop: from n/a through 2.6.0...

9.6CVSS9.2AI score0.00219EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/09 12:0 a.m.5 views

PT-2025-15794 · Unknown · Agence Web Eoxia - Montpellier Wp Shop

Name of the Vulnerable Software and Affected Versions: Agence web Eoxia - Montpellier WP shop versions n/a through 2.6.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to upload a web shell to a web server. This can be achieved through exploiting...

9.6CVSS9.4AI score0.00219EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/04/09 12:0 a.m.2 views

WordPress plugin WP shop 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

9.6CVSS8.8AI score0.00219EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/04/06 7:36 p.m.263 views

Exploit for Deserialization of Untrusted Data in Apache Tomcat

JSP Web Shell Uploader A simple Python tool for uploading a basi...

9.8CVSS9.3AI score0.99945EPSS
Exploits45
RedhatCVE
RedhatCVE
added 2025/04/02 1:32 p.m.5 views

CVE-2025-31577

Unrestricted Upload of File with Dangerous Type vulnerability in appointify Appointify appointify allows Upload a Web Shell to a Web Server.This issue affects Appointify: from n/a through = 1.0.8...

6.6CVSS7.2AI score0.00265EPSS
Exploits0References1
NVD
NVD
added 2025/03/31 1:15 p.m.4 views

CVE-2025-31577

Unrestricted Upload of File with Dangerous Type vulnerability in appointify Appointify appointify allows Upload a Web Shell to a Web Server.This issue affects Appointify: from n/a through = 1.0.8...

6.6CVSS0.00265EPSS
Exploits0References1
CVE
CVE
added 2025/03/31 12:55 p.m.47 views

CVE-2025-31577

CVE-2025-31577 (Appointify) Unrestricted Upload of File with Dangerous Type in Appointify, allowing an authenticated admin to upload a Web Shell to the web server. Affected software: Appointify (WordPress plugin) up to version 1.0.8. The cited CVSS data (3.1) indicates a base score of 6.6 (Medium...

6.6CVSS7.2AI score0.00265EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/31 12:55 p.m.15 views

CVE-2025-31577 WordPress Appointify plugin <= 1.0.8 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in appointify Appointify appointify allows Upload a Web Shell to a Web Server.This issue affects Appointify: from n/a through = 1.0.8...

6.6CVSS0.00265EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/31 12:55 p.m.5 views

CVE-2025-31577 WordPress Appointify plugin <= 1.0.8 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in appointify Appointify appointify allows Upload a Web Shell to a Web Server.This issue affects Appointify: from n/a through = 1.0.8...

6.6CVSS7.2AI score0.00265EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.2 views

WordPress plugin Appointify 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

6.6CVSS8.5AI score0.00265EPSS
Exploits0References1
Exploit DB
Exploit DB
added 2025/03/27 12:0 a.m.278 views

MoziloCMS 3.0 - Remote Code Execution (RCE)

Exploit Title: MoziloCMS 3.0 - Remote Code Execution RCE Date: 10/09/2024 Exploit Author: Secfortress https://github.com/sec-fortress Vendor Homepage: https://mozilo.de/ Software Link: https://github.com/moziloDasEinsteigerCMS/mozilo3.0/archive/refs/tags/3.0.1.zip Version: 3.0 Tested on: Debian...

7.2CVSS7AI score0.16249EPSS
Exploits4
GithubExploit
GithubExploit
added 2025/03/24 12:38 a.m.534 views

Exploit for Unrestricted Upload of File with Dangerous Type in Webfulcreations Computer_Repair_Shop

🛡️ WordPress RepairBuddy Plugin Exploit 📜 CVE Information...

10CVSS9.6AI score0.01794EPSS
Exploits4
GithubExploit
GithubExploit
added 2025/03/22 11:25 p.m.337 views

Exploit for CVE-2024-49653

📜 WordPress Portfolleo Plugin Exploit CVE-2024-49653 🚨 V...

9.9CVSS6.8AI score0.01153EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/03/19 6:9 a.m.6 views

CVE-2025-2396

The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.8CVSS8.2AI score0.00579EPSS
Exploits0References4
GithubExploit
GithubExploit
added 2025/03/18 7:32 a.m.454 views

Exploit for CVE-2024-52402

🚀 Exploit for CVE-2024-52402: WordPress Exclusive Content Pass...

9.6CVSS9.8AI score0.00781EPSS
Exploits1
GithubExploit
GithubExploit
added 2025/03/18 1:47 a.m.414 views

Exploit for CVE-2024-56249

🛠️ WordPress Master Toolkit Exploit CVE-2024-56249 🌟 Ove...

9.8CVSS9.6AI score0.0186EPSS
Exploits2
NVD
NVD
added 2025/03/17 6:15 a.m.12 views

CVE-2025-2396

The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.8CVSS0.00579EPSS
Exploits0References2
CVE
CVE
added 2025/03/17 5:58 a.m.50 views

CVE-2025-2396

The CVE-2025-2396 entry concerns the U-Office Force product by e-Excellence. The vulnerability is an Arbitrary File Upload that allows remote attackers with regular privileges to upload and execute a Web Shell backdoor, enabling arbitrary code execution on the server. Documented impact is High (C...

8.8CVSS8.2AI score0.00579EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/03/17 12:0 a.m.3 views

e-Excellence U-Office Force 代码问题漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. A code issue vulnerability exists in e-Excellence U-Office Force, which originates from an arbitrary file upload and could allow a remote attacker to upload and execute a Web Shell backdoor to...

8.8CVSS7.9AI score0.00579EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2025/03/14 9:30 a.m.242 views

Exploit for CVE-2025-28915

CVE-2025-28915 Vulnerability Description: WordPress is a bl...

9.1CVSS7.4AI score0.01188EPSS
Exploits3
Rows per page
Query Builder