CVE-2023-53945

BrainyCP 1.0 Remote Code Execution via Authenticated Crontab Manipulation

BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitrary commands through the crontab configuration interface. Attackers can exploit the crontab endpoint by adding a malicious command that spawns a reverse shell to a specified IP and port.

CVSS 4.0 · 8.7 High EPSS 1.1% KEV · Not listed

Vendors

Brainycp

Products

Brainycp

CVE-2023-53933

Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload

Serendipity 2.4.0 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension. Attackers can upload files with system command payloads to the media upload endpoint and execute arbitrary commands on the server.

CVSS 4.0 · 8.7 High EPSS 1.0% KEV · Not listed

Vendors

S9y

Products

Serendipity

CVE-2023-53924

UliCMS 2023.1-sniffing-vicuna Remote Code Execution via Avatar Upload

UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .phar extension during profile avatar upload. Attackers can trigger code execution by visiting the uploaded file's location, enabling system command execution through maliciously crafted avatar uploads.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Ulicms

Products

Ulicms

CVE-2023-53922

TinyWebGallery v2.5 Remote Code Execution via Unrestricted File Upload

TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthenticated attackers to upload malicious PHP files. Attackers can upload .phar files with embedded system commands to execute arbitrary code on the server by accessing the uploaded file's URL.

CVSS 4.0 · 9.3 Critical EPSS 1.1% KEV · Not listed

Vendors

Tinywebgallery

Products

Tinywebgallery

CVE-2023-53921

SitemagicCMS 4.4.3 Remote Code Execution via Unrestricted File Upload

SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory. Attackers can upload a .phar file with system command execution payload to compromise the web application and execute arbitrary system commands.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Sitemagic

Products

Sitemagic Sitemagic Cms

CVE-2023-53892

Blackcat CMS 1.4 Remote Code Execution via Jquery Plugin Manager

Blackcat CMS 1.4 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the jquery plugin manager. Attackers can upload a zip file with a PHP shell script and execute arbitrary system commands by accessing the uploaded plugin's PHP file with a 'code' parameter.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Blackcat-cms

Products

Blackcat Cms

CVE-2023-53875

GOM Player 2.3.90.5360 Remote Code Execution via Insecure IE Component

GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute arbitrary code through DNS spoofing. Attackers can redirect victims using a malicious URL shortcut and WebDAV technique to run a reverse shell with SMB server interaction.

CVSS 4.0 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Gomlab

Products

Gom Player

CVE-2023-53868

Coppermine Gallery 1.6.25 Remote Code Execution via Plugin Upload

Coppermine Gallery 1.6.25 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the plugin manager. Attackers can upload a zipped PHP file with system commands to the plugin directory and execute arbitrary code by accessing the uploaded plugin script.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Coppermine Coppermine-gallery

Products

Coppermine Photo Gallery Gallery Coppermine Photo Gallery

CVE-2023-53774

MiniDVBLinux 5.4 Simple VideoDiskRecorder Protocol Remote Code Execution

MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Minidvblinux

Products

Minidvblinux

CVE-2022-50907

e107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCE

e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrative users to bypass upload restrictions and execute PHP files. Attackers can upload malicious PHP files to parent directories by manipulating the upload URL parameter, enabling remote code execution through the Media Manager import feature.

CVSS 4.0 · 8.6 High EPSS 1.2% KEV · Not listed

Vendors

E107

Products

E107 E107 Cms

CVE-2022-50893

VIAVIWEB Wallpaper Admin 1.0 - Code Execution via Image Upload

VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.php endpoint to execute arbitrary code on the server.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Viaviweb

Products

Wallpaper Admin

CVE-2021-47830

GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF

GetSimple CMS My SMTP Contact Plugin 1.1.1 contains a cross-site request forgery (CSRF) vulnerability. Attackers can craft a malicious webpage that, when visited by an authenticated administrator, can change SMTP configuration settings in the plugin. This may allow unauthorized changes but does not directly enable remote code execution.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Get-simple Getsimple-ce

Products

Getsimplecms Getsimple Cms

CVE-2019-25321

FTP Navigator 8.03 - Stack Overflow (SEH)

FTP Navigator 8.03 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. Attackers can craft a malicious payload that triggers a buffer overflow when pasted into the Custom Command textbox, enabling remote code execution and launching the calculator as proof of concept.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Internet-soft Softpedia

Products

Ftp Navigator Ftp Navigator

CVE-2014-125117

D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE

A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a specially crafted HTTP POST request to the /common/info.cgi endpoint. This flaw enables an unauthenticated attacker to achieve remote code execution with system-level privileges.

CVSS 4.0 · 9.3 Critical EPSS 9.3% KEV · Not listed

Vendors

D-link Dlink

Products

Dsp-w215 Dsp-w215 Dsp-w215 Firmware

CVE-2013-10044

OpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCE

An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and subsequently escalate privileges. Once elevated, the attacker can exploit an unrestricted file upload flaw to achieve remote code execution, resulting in full compromise of the application and its host system.

CVSS 4.0 · 8.7 High EPSS 2.3% KEV · Not listed

Vendors

Open-emr Openemr

Products

Openemr Openemr

CVE-2013-10032

GetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload

An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows authenticated users to upload arbitrary files without proper validation of MIME types or extensions. By uploading a .pht file containing PHP code, an attacker can bypass blacklist-based restrictions and place executable code within the web root. A crafted request using a polyglot or disguised extension allows the attacker to execute the payload by accessing the file directly via the web server. This vulnerability exists due to the use of a blacklist for filtering file types instead of a whitelist.

CVSS 4.0 · 8.7 High EPSS 4.3% KEV · Not listed

Vendors

Get-simple

Products

Getsimplecms

CVE-2012-10054

Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE

Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation that permits arbitrary file uploads without authentication. By exploiting a path traversal flaw in the fileName parameter, attackers can write malicious ASPX scripts directly into the web-accessible /umbraco/ directory and execute them remotely.

CVSS 4.0 · 9.3 Critical EPSS 4.5% KEV · Not listed

Vendors

Umbraco

Products

Umbraco Cms

CVE-2012-10030

FreeFloat FTP Server Arbitrary File Upload

FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories. The server accepts empty credentials, defaults user access to the root of the C:\ drive, and imposes no restrictions on file type or destination path. These conditions enable attackers to upload executable payloads and .mof files to locations such as system32 and wbem\mof, where Windows Management Instrumentation (WMI) automatically processes and executes them. This results in remote code execution with SYSTEM-level privileges, without requiring user interaction.

CVSS 4.0 · 9.3 Critical EPSS 2.6% KEV · Not listed

Vendors

Freefloat

Products

Freefloat Ftp Server Ftp Server

CVE-2010-20121

EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow

EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD (Change Working Directory) command, the server fails to properly validate the length of the input string, allowing attackers to overwrite memory on the stack. This flaw enables remote code execution without authentication, as EasyFTP allows anonymous access by default. The vulnerability was resolved in version 1.7.0.12, after which the product was renamed “UplusFtp.”

CVSS 4.0 · 9.3 Critical EPSS 5.1% KEV · Not listed

Vendors

Easyftp Server Project Kmint21 Software

Products

Easyftp Server Easyftp Server

CVE-2017-20237

Hirschmann Industrial HiVision Authentication Bypass Remote Code Execution

Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 contains an authentication bypass vulnerability in the master service that allows unauthenticated remote attackers to execute arbitrary commands with administrative privileges. Attackers can invoke exposed interface methods over the remote service to bypass authentication and achieve remote code execution on the underlying operating system.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Belden

Products

Hirschmann Industrial Hivision