CVE-2022-41840-PoC

Zenario CMS 9.3 - Exploit de RCE no autenticado CVE-2022-41840 Una vulnerabilidad de ejecución remota de código RCE no autenticada que afecta a Zenario CMS versión 9.3 y anteriores. El exploit aprovecha una vulnerabilidad de carga de archivos en el endpoint AJAX para subir un webshell PHP y logra...

CVE-2021-42171

CVE-2021-42171 Subida de archivos para ejecución remota de código en Zenario CMS 9.0.54156 https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74 Server test Distributor ID: Ubuntu Description: Ubuntu 21.04 Release: 21.04 Codename: hirsute...

CVE-2021-27672

SQL Injection in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component...

Exploit for Path Traversal in Welcart Welcart_E-Commerce

Zenario CMS 9.3 - Unauthenticated RCE Exploit CVE-2022-418...

CVE-2021-27673

Cross Site Scripting XSS in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "cID" parameter when creating a new HTML component...

CVE-2022-23043

Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Types' using the '.phar' extension. Then an attacker can upload a malicious file, intercept the request and change the extension to '.phar' in order to run commands on the server...

CVE-2024-34460

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...

CVE-2024-34461

Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator...

EUVD-2021-1331

Malware in sbrugna...

EUVD-2021-1293

Malware in sbrugna...

EUVD-2022-7349

Malicious code in bioql PyPI...

EUVD-2022-7250

Malicious code in bioql PyPI...

EUVD-2022-7420

Malicious code in bioql PyPI...

EUVD-2024-1653

Malicious code in bioql PyPI...

EUVD-2022-1561

Malicious code in bioql PyPI...

EUVD-2022-7369

Malicious code in bioql PyPI...

EUVD-2022-1880

Malicious code in bioql PyPI...

EUVD-2022-7227

Malicious code in bioql PyPI...

EUVD-2023-2781

Malicious code in bioql PyPI...

EUVD-2023-2671

Malicious code in bioql PyPI...