Lucene search
K

2180 matches found

Positive Technologies
Positive Technologies
added 2025/01/15 12:0 a.m.3 views

PT-2025-4697 · WordPress · Wr Price List Manager For Woocommerce

Name of the Vulnerable Software and Affected Versions: WR Price List Manager For Woocommerce versions 1.0.0 through 1.0.8 Description: The issue allows an attacker to upload a web shell to a web server due to an unrestricted upload of files with dangerous types. This can lead to significant...

9.9CVSS9.4AI score0.00441EPSS
Exploits0References7
Trend Micro Simply Security
Trend Micro Simply Security
added 2025/01/14 12:0 a.m.17 views

Investigating A Web Shell Intrusion With Trend Micro™ Managed XDR

This blog discusses a web shell intrusion incident where attackers abused the IIS worker to exfiltrate stolen data...

7.2AI score
Exploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2025/01/14 12:0 a.m.4 views

Investigating A Web Shell Intrusion With Trend Micro Managed XDR

This blog discusses a web shell intrusion incident where attackers abused the IIS worker to exfiltrate stolen data...

7.2AI score
Exploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2025/01/14 12:0 a.m.1 views

Investigating A Web Shell Intrusion With Trend Micro™ Managed XDR

This blog discusses a web shell intrusion incident where attackers abused the IIS worker to exfiltrate stolen data...

7.2AI score
Exploits0
GithubExploit
GithubExploit
added 2025/01/11 2:6 a.m.235 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulne...

9CVSS7.8AI score0.94129EPSS
Exploits13
NVD
NVD
added 2025/01/09 4:16 p.m.10 views

CVE-2025-22504

Unrestricted Upload of File with Dangerous Type vulnerability in jumpdemand 4ECPS Web Forms 4ecps-webforms allows Upload a Web Shell to a Web Server.This issue affects 4ECPS Web Forms: from n/a through = 0.2.18...

10CVSS0.0038EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/09 3:39 p.m.30 views

CVE-2025-22504 WordPress 4ECPS Web Forms Plugin <= 0.2.18 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in jumpdemand 4ECPS Web Forms 4ecps-webforms allows Upload a Web Shell to a Web Server.This issue affects 4ECPS Web Forms: from n/a through = 0.2.18...

10CVSS0.0038EPSS
Exploits0References1
CVE
CVE
added 2025/01/09 3:39 p.m.81 views

CVE-2025-22504

CVE-2025-22504 involves the 4ECPS Web Forms plugin. It is an Unrestricted Upload of File with Dangerous Type vulnerability that permits uploading a web shell to the server. Public details indicate affected software: 4ECPS Web Forms versions from unspecified start to 0.2.18. The CVE is linked to a...

10CVSS7.2AI score0.0038EPSS
Exploits0References1
NVD
NVD
added 2025/01/07 11:15 a.m.5 views

CVE-2024-43243

Unrestricted Upload of File with Dangerous Type vulnerability in themeglow JobBoard Job listing job-board-light allows Upload a Web Shell to a Web Server.This issue affects JobBoard Job listing: from n/a through = 1.2.6...

10CVSS0.01202EPSS
Exploits0References1
CVE
CVE
added 2025/01/07 10:49 a.m.41 views

CVE-2024-43243

CVE-2024-43243 : Unauthenticated Arbitrary File Upload in the JobBoard Job listing plugin (WordPress) allows uploading a web shell due to an unrestricted file upload of dangerous types. Affected version range is JobBoard Job listing up to 1.2.6; patch status: Patched. Impact noted in public CVE l...

10CVSS7.2AI score0.01202EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/07 10:49 a.m.18 views

CVE-2024-43243 WordPress JobBoard Job listing plugin <= 1.2.6 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in themeglow JobBoard Job listing job-board-light allows Upload a Web Shell to a Web Server.This issue affects JobBoard Job listing: from n/a through = 1.2.6...

10CVSS0.01202EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.2 views

PT-2025-2645 · Unknown · Themeglow Jobboard

Name of the Vulnerable Software and Affected Versions: ThemeGlow JobBoard Job listing versions 1.2.6 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can be exploited by uploading a...

10CVSS9.5AI score0.01202EPSS
Exploits0References7
NVD
NVD
added 2025/01/02 12:15 p.m.18 views

CVE-2024-56264

Unrestricted Upload of File with Dangerous Type vulnerability in Beee ACF City Selector acf-city-selector allows Upload a Web Shell to a Web Server.This issue affects ACF City Selector: from n/a through = 1.14.0...

6.6CVSS0.17675EPSS
Exploits2References1
NVD
NVD
added 2025/01/02 12:15 p.m.17 views

CVE-2024-56249

Unrestricted Upload of File with Dangerous Type vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Upload a Web Shell to a Web Server.This issue affects WPMasterToolKit: from n/a through = 1.13.1...

9.1CVSS0.48157EPSS
Exploits1References1
CVE
CVE
added 2025/01/02 12:1 p.m.54 views

CVE-2024-56264

The CVE-2024-56264 entry covers a vulnerability in the WordPress ACF City Selector plugin (versions

6.6CVSS7.2AI score0.17675EPSS
Exploits2References1
Cvelist
Cvelist
added 2025/01/02 12:1 p.m.23 views

CVE-2024-56264 WordPress ACF City Selector plugin <= 1.14.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Beee ACF City Selector acf-city-selector allows Upload a Web Shell to a Web Server.This issue affects ACF City Selector: from n/a through = 1.14.0...

6.6CVSS0.17675EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2025/01/02 12:1 p.m.11 views

CVE-2024-56264 WordPress ACF City Selector plugin <= 1.14.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Beee ACF City Selector allows Upload a Web Shell to a Web Server.This issue affects ACF City Selector: from n/a through 1.14.0...

6.6CVSS6.8AI score0.17675EPSS
Exploits2References1
CVE
CVE
added 2025/01/02 12:1 p.m.66 views

CVE-2024-56249

CVE-2024-56249 affects the WordPress plugin WPMasterToolKit (versions

9.1CVSS7.4AI score0.48157EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/01/02 12:1 p.m.31 views

CVE-2024-56249 WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Upload a Web Shell to a Web Server.This issue affects WPMasterToolKit: from n/a through = 1.13.1...

9.1CVSS0.48157EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/01/02 12:1 p.m.11 views

CVE-2024-56249 WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Webdeclic WPMasterToolKit allows Upload a Web Shell to a Web Server.This issue affects WPMasterToolKit: from n/a through 1.13.1...

9.1CVSS6.8AI score0.48157EPSS
Exploits1References1
Rows per page
Query Builder