Webshell-Analyzer - Web Shell Scanner And Analyzer

Web shell analyzer is a cross platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is the bigger brother to the web shell scanner project http://github.com/tstillz/webshell-scan, which only...

File Upload Vulnerability in Kaixin Helpdesk System

The Kairos Helpdesk System is a system for dealing with day-to-day issues. A file upload vulnerability exists in the Qixing Helpdesk System. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

WordPress Plugin HS Brand Logo Slider 'logoupload' File Upload Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A file upload vulnerability exists in the WordPress plugin HS Brand Logo Slider 'logoupload...

File Upload Vulnerability in G4Studio

G4Studio is a set of free open source JavaEE-based rapid development platform . A file upload vulnerability exists in G4Studio. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File upload vulnerability in ShopXO Pa***.php file

ShopXO is an open source enterprise-level open source e-commerce system. A file upload vulnerability exists in the ShopXO Pa.php file. An attacker can exploit the vulnerability to upload webshell and gain server privileges...

File upload vulnerability in ShopXO Pl***.php file

ShopXO is an open source enterprise-level open source e-commerce system. A file upload vulnerability exists in the ShopXO Pl.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Jeecg-Boot suffers from an arbitrary file upload vulnerability

Jeecg-Boot is a code generator based rapid development platform , using front-end and back-end separation architecture : SpringBoot 2.x, Ant Design & Vue, Mybatis-plus, Shiro, JWT. Jeecg-Boot has an arbitrary file upload vulnerability. An attacker can exploit the vulnerability to upload webshell...

GOautodial 4.0 Shell Upload

Exploit Title: GOautodial 4.0 - Authenticated Shell Upload Author: Balzabu Discovery Date: 07-23-2020 Vendor Homepage: https://goautodial.org/ Software Link: https://goautodial.org/GOautodial-4-x8664-Final-20191010-0150.iso.html Tested Version: 4.0 Last relase as of today Tested on OS: CentOS 7...

GOautodial 4.0 - Authenticated Shell Upload

Exploit Title: GOautodial 4.0 - Authenticated Shell Upload Author: Balzabu Discovery Date: 07-23-2020 Vendor Homepage: https://goautodial.org/ Software Link: https://goautodial.org/GOautodial-4-x8664-Final-20191010-0150.iso.html Tested Version: 4.0 Last relase as of today Tested on OS: CentOS 7...

File upload vulnerability in UCMS fi***.php file

UCMS is a content management system written in PHP. A file upload vulnerability exists in the UCMS fi.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

SEO Panel 4.6.0 Remote Code Execution

Exploit Title: SEO Panel 4.6.0 - Remote Code Execution Google Dork: N/A Date: 2020-10-03 Exploit Author: Kiko Andreu kikoas1995 & Daniel Monzón stark0de Vendor Homepage: https://seopanel.org/ Software Link: https://www.seopanel.org/spdownload/4.6.0 Version: 4.6.0 Tested on: Kali Linux x64 5.4.0 C...

File Upload Vulnerability in Fishy CMS Backend Data Backup Branch

FishLeap CMS is a content management system specifically geared towards enterprise applications. A file upload vulnerability exists in the backend data backup of Fishy CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

SEO Panel 4.6.0 - Remote Code Execution (1)

Exploit Title: SEO Panel 4.6.0 - Remote Code Execution Google Dork: N/A Date: 2020-10-03 Exploit Author: Kiko Andreu kikoas1995 & Daniel Monzón stark0de Vendor Homepage: https://seopanel.org/ Software Link: https://www.seopanel.org/spdownload/4.6.0 Version: 4.6.0 Tested on: Kali Linux x64 5.4.0 C...

Exploit for CVE-2018-2894

Weblogic CVE-2018-2894 CVE-2018-2894 0x01 前言 Oracle 7月更新中，修复了Weblogic Web Service Test Page中一处任意文件上传漏洞，Web Service Test Page 在“生产模式”下默认不开启，所以该漏洞有一定限制， 利用该漏洞，可以上传任意jsp文件，进而获取服务器权限。 0x02 漏洞环境 Ubuntu 16.04 https://github.com/vulhub/vulhub/blob/master/weblogic/CVE-2018-2894/ 执行如下命令，启动weblogic 12.2.1....

Comodo Unified Threat Management Web Console 2.7.0 Remote Code Execution

Exploit Title: Comodo Unified Threat Management Web Console 2.7.0 - Remote Code Execution Date: 2018-08-15 Exploit Author: Milad Fadavvi Author's LinkedIn: https://www.linkedin.com/in/fadavvi/ Vendor Homepage: https://www.comodo.com/ Version: Releases before 2.7.0 & 1.5.0 Tested on:...

Comodo Unified Threat Management Web Console 2.7.0 - Remote Code Execution

Exploit Title: Comodo Unified Threat Management Web Console 2.7.0 - Remote Code Execution Date: 2018-08-15 Exploit Author: Milad Fadavvi Author's LinkedIn: https://www.linkedin.com/in/fadavvi/ Vendor Homepage: https://www.comodo.com/ Version: Releases before 2.7.0 & 1.5.0 Tested on:...

CVE-2020-23828

A File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote attackers to achieve Remote Code Execution RCE on the hosting webserver by uploading a crafted PHP web-shell that bypasses the image upload filters. An attack uses...

File Upload Vulnerability in CMS Backend

High Fives CMS is a free database-free CMS system. A file upload vulnerability exists in the backend of High Fives CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in Mantis Chinese Enhanced Edition

Mantis is a lightweight open source defect tracking system based on PHP technology to provide project management and defect tracking services in the form of Web operations . A file upload vulnerability exists in the Chinese enhanced version of Mantis. An attacker can exploit the vulnerability to...

File Upload Vulnerability in the Application Resource Library Platform of Xiamen NetZhongwei Software Co.

Xiamen net in the net software limited company is specialized in accounting class teaching teaching software product development, service, sales enterprises. A file upload vulnerability exists in the application repository platform of Xiamen NetZhongwei Software Co. An attacker can use the...