CVE-2021-42171

CVE-2021-42171 Datei-Upload zu Remote Code Execution auf Zenario CMS 9.0.54156 https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74 root@kitploit: Server test Distributor ID: Ubuntu Description: Ubuntu 21.04 Release: 21.04 Codename: hirsute...

CVE-2022-41840-PoC

Zenario CMS 9.3 - Nicht authentifizierter RCE-Exploit CVE-2022-41840 Eine nicht authentifizierte Schwachstelle zur Remote-Codeausführung RCE, die Zenario CMS Version 9.3 und früher betrifft. Der Exploit nutzt eine Datei-Upload-Schwachstelle im AJAX-Endpunkt aus, um eine PHP-Webshell hochzuladen u...

CVE-2021-27672

SQL Injection in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component...

Exploit for Path Traversal in Welcart Welcart_E-Commerce

Zenario CMS 9.3 - Unauthenticated RCE Exploit CVE-2022-418...

CVE-2021-27673

Cross Site Scripting XSS in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "cID" parameter when creating a new HTML component...

CVE-2022-23043

Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Types' using the '.phar' extension. Then an attacker can upload a malicious file, intercept the request and change the extension to '.phar' in order to run commands on the server...

CVE-2024-34460

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...

CVE-2024-34461

Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator...

EUVD-2021-1331

Malware in sbrugna...

EUVD-2021-1293

Malware in sbrugna...

EUVD-2024-1653

Malicious code in bioql PyPI...

EUVD-2022-7349

Malicious code in bioql PyPI...

EUVD-2022-7420

Malicious code in bioql PyPI...

EUVD-2022-7250

Malicious code in bioql PyPI...

EUVD-2022-1561

Malicious code in bioql PyPI...

EUVD-2022-7227

Malicious code in bioql PyPI...

EUVD-2022-7369

Malicious code in bioql PyPI...

EUVD-2022-1880

Malicious code in bioql PyPI...

EUVD-2023-2671

Malicious code in bioql PyPI...

EUVD-2023-2781

Malicious code in bioql PyPI...