351 matches found
CVE-2022-41840-PoC
Zenario CMS 9.3 - Unauthenticated RCE Exploit CVE-2022-41840 An unauthenticated remote code execution RCE vulnerability affecting Zenario CMS version 9.3 and earlier. The exploit leverages a file upload vulnerability in the AJAX endpoint to upload a PHP webshell and achieve code execution...
CVE-2021-42171
CVE-2021-42171 File upload to Remote Code Execution on Zenario CMS 9.0.54156 https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74 Server test Distributor ID: Ubuntu Description: Ubuntu 21.04 Release: 21.04 Codename: hirsute...
Zenario Admin Login Panel - Detect
Zenario admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Zenario admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zenario Admin Login Panel - Detect',...
CVE-2021-27672
SQL Injection in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component...
Exploit for Path Traversal in Welcart Welcart_E-Commerce
Zenario CMS 9.3 - Unauthenticated RCE Exploit CVE-2022-418...
CVE-2021-27673
Cross Site Scripting XSS in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "cID" parameter when creating a new HTML component...
CVE-2022-23043
Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Types' using the '.phar' extension. Then an attacker can upload a malicious file, intercept the request and change the extension to '.phar' in order to run commands on the server...
CVE-2024-34460
The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...
CVE-2024-34461
Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator...
EUVD-2021-1331
Malware in sbrugna...
EUVD-2021-1293
Malware in sbrugna...
EUVD-2022-7227
Malicious code in bioql PyPI...
EUVD-2023-43287
Malicious code in bioql PyPI...
EUVD-2023-2781
Malicious code in bioql PyPI...
EUVD-2023-2671
Malicious code in bioql PyPI...
EUVD-2023-2698
Malicious code in bioql PyPI...
EUVD-2022-1880
Malicious code in bioql PyPI...
EUVD-2022-7349
Malicious code in bioql PyPI...