{"vulnerability": "cve-2013-1005", "sightings": [{"uuid": "23e3ef0c-06c1-40c3-94c9-1c8d765b653f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10051", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "fb4432f0-6ad9-4c1e-a27d-21290dda0828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10052", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "428d1f50-7034-4f73-bdba-03a1a4cebadd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10059", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "d5c820c6-8110-4869-9efc-fb849536466f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10050", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "2d7214cb-bd3a-475d-a52b-103536d08641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10053", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "231116c6-af74-4f82-b003-2e3c377c32ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10054", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "985606a1-ee12-45dd-ac8b-6c58c130db99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10055", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "efa1310b-5fec-410e-8b40-b3f3667019b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10057", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "fa0140bd-e5e6-4df8-b37e-6b4566bff8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10058", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "4b60dc41-2e6c-4441-b046-e6532076ca4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10051", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lveoedk6m726", "content": "", "creation_timestamp": "2025-08-01T22:14:24.755152Z"}, {"uuid": "6123e019-8eb0-4feb-bf38-c371740534e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10058", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvep7ankrz2p", "content": "", "creation_timestamp": "2025-08-01T22:29:27.918988Z"}, {"uuid": "a47e617d-47d0-4684-b324-dd833432dc98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10051", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvh2scb66s2p", "content": "", "creation_timestamp": "2025-08-02T21:02:17.822198Z"}, {"uuid": "de161811-6736-4ca4-b2c7-55d750830e60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10054", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvm6akpydr2e", "content": "", "creation_timestamp": "2025-08-04T21:47:16.065243Z"}, {"uuid": "343e0bbc-4631-4fce-91bf-28dcb91793f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10052", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvm6r6zzva2s", "content": "", "creation_timestamp": "2025-08-04T21:56:34.376721Z"}, {"uuid": "07be24a5-fe83-4393-bdcd-92a58a6d045d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10059", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_dir615_up_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "f334aba3-74fc-492e-a7c6-3c8c4d55d65d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10058", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksys_wrt160nv2_apply_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "8bd19ca2-7231-49ef-b56f-0ba18e250e28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10050", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_dir300_exec_telnet.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "e373dc7d-4a01-47b8-9f12-13bcd0b245c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10052", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/zpanel_zsudo.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "9b062e01-9d1e-4a57-89c0-717945db069c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10055", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/havalite_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "aa31db9f-48dc-4c19-bdc3-8257bd36efda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10051", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/instantcms_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "8dbc4506-409b-4600-9da7-0ed0b8115d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10057", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/synactis_connecttosynactis_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "99ff7a94-8779-4f7c-815d-18ae3c820ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10054", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/libretto_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "2593939a-091f-439c-baac-120a097b573b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10053", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zpanel_username_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "6667b036-e603-4a97-a6f6-8df0bd83148f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10050", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_dir300_exec_telnet.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Michael Messner \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Various D-Link Routers are vulnerable to OS command injection via the web\\n          interface. The vulnerability exists in tools_vct.xgi, which is accessible with\\n          credentials. According to the vulnerability discoverer, more D-Link devices may\\n          be affected.\", \"disclosure_date\": \"2013-04-22\", \"fullname\": \"exploit/linux/http/dlink_dir300_exec_telnet\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"D-Link Devices Unauthenticated Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/dlink_dir300_exec_telnet.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/dlink_dir300_exec_telnet\", \"references\": [\"CVE-2013-10050\", \"OSVDB-92698\", \"EDB-25024\", \"BID-59405\", \"URL-http://www.s3cur1ty.de/m1adv2013-014\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:30.135179Z"}, {"uuid": "1a1e29ca-210d-49d9-ae43-ae668c525da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10059", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_dir615_up_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, mipsle\", \"author\": [\"Michael Messner \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Some D-Link Routers are vulnerable to an authenticated OS command injection on\\n          their web interface, where default credentials are admin/admin or admin/password.\\n          Since it is a blind os command injection vulnerability, there is no output for the\\n          executed command when using the cmd generic payload. This module was tested against\\n          a DIR-615 hardware revision H1 - firmware version 8.04. A ping command against a\\n          controlled system could be used for testing purposes. The exploit uses the wget\\n          client from the device to convert the command injection into an arbitrary payload\\n          execution.\", \"disclosure_date\": \"2013-02-07\", \"fullname\": \"exploit/linux/http/dlink_dir615_up_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"D-Link DIR615h OS Command Injection\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/dlink_dir615_up_exec.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/dlink_dir615_up_exec\", \"references\": [\"CVE-2013-10059\", \"BID-57882\", \"EDB-24477\", \"OSVDB-90174\", \"URL-http://www.s3cur1ty.de/m1adv2013-008\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"CMD\", \"Linux mipsel Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:30.369250Z"}, {"uuid": "7fa8dec3-38d7-4bd6-ba4b-d8a7b9dee8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10058", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksys_wrt160nv2_apply_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, mipsle\", \"author\": [\"Michael Messner \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Some Linksys Routers are vulnerable to an authenticated OS command injection on\\n          their web interface where default credentials are admin/admin or admin/password.\\n          Since it is a blind OS command injection vulnerability, there is no output for the\\n          executed command when using the cmd generic payload. This module has been tested on\\n          a Linksys WRT160n version 2 - firmware version v2.0.03. A ping command against a\\n          controlled system could be used for testing purposes. The exploit uses the tftp\\n          client from the device to stage to native payloads from the command injection.\", \"disclosure_date\": \"2013-02-11\", \"fullname\": \"exploit/linux/http/linksys_wrt160nv2_apply_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Linksys WRT160nv2 apply.cgi Remote Command Injection\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/linksys_wrt160nv2_apply_exec.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/linksys_wrt160nv2_apply_exec\", \"references\": [\"CVE-2013-10058\", \"BID-57887\", \"EDB-24478\", \"OSVDB-90093\", \"URL-http://www.s3cur1ty.de/m1adv2013-012\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"CMD\", \"Linux mipsel Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:43.433911Z"}, {"uuid": "5458c912-6603-49c0-9083-e892ccbacc3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10052", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/zpanel_zsudo.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"cmd, x86\", \"author\": [\"sinn3r \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module abuses the zsudo binary, installed with zpanel, to escalate\\n            privileges. In order to work, a session with access to zsudo on the sudoers\\n            configuration is needed. This module is useful for post exploitation of ZPanel\\n            vulnerabilities, where typically web server privileges are acquired, and this\\n            user is allowed to execute zsudo on the sudoers file.\", \"disclosure_date\": \"2013-06-07\", \"fullname\": \"exploit/linux/local/zpanel_zsudo\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:34 +0000\", \"name\": \"ZPanel zsudo Local Privilege Escalation Exploit\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/local/zpanel_zsudo.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/local/zpanel_zsudo\", \"references\": [\"CVE-2013-10052\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Command payload\", \"Linux x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:14.696265Z"}, {"uuid": "5373b091-1865-4fe7-9dd8-584044350ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10051", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/instantcms_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"AkaStep\", \"Ricardo Jorge Borges de Almeida \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an arbitrary PHP command execution vulnerability because of a\\n          dangerous use of eval() in InstantCMS in versions 1.6 and prior.\", \"disclosure_date\": \"2013-06-26\", \"fullname\": \"exploit/unix/webapp/instantcms_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"InstantCMS 1.6 Remote PHP Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/instantcms_exec.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/instantcms_exec\", \"references\": [\"CVE-2013-10051\", \"BID-60816\", \"PACKETSTORM-122176\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"InstantCMS 1.6\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:43.070268Z"}, {"uuid": "dd6210d3-8540-4fff-b8ce-354d71352cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10054", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/libretto_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php, x86\", \"author\": [\"CWH\", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability found in LibrettoCMS 1.1.7, and\\n          possibly prior.  Attackers can bypass the file extension check and abuse the upload\\n          feature in order to upload a malicious PHP file without authentication, which\\n          results in arbitrary remote code execution.\", \"disclosure_date\": \"2013-06-14\", \"fullname\": \"exploit/unix/webapp/libretto_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"LibrettoCMS File Manager Arbitary File Upload Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/libretto_upload_exec.rb\", \"platform\": \"Linux,PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/libretto_upload_exec\", \"references\": [\"CVE-2013-10054\", \"OSVDB-94391\", \"EDB-26213\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Generic (PHP Payload)\", \"Linux x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:43.936265Z"}, {"uuid": "a73f463d-eeb7-474c-a193-b1afc1cb4c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10055", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/havalite_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php, x86\", \"author\": [\"CWH\", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability found in Havalite CMS 1.1.7, and\\n          possibly prior.  Attackers can abuse the upload feature in order to upload a\\n          malicious PHP file without authentication, which results in arbitrary remote code\\n          execution.\", \"disclosure_date\": \"2013-06-17\", \"fullname\": \"exploit/unix/webapp/havalite_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Havalite CMS Arbitary File Upload Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/havalite_upload_exec.rb\", \"platform\": \"Linux,PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/havalite_upload_exec\", \"references\": [\"CVE-2013-10055\", \"OSVDB-94405\", \"EDB-26243\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Generic (PHP Payload)\", \"Linux x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:42.818634Z"}, {"uuid": "b6c79fb3-282c-4350-9262-f7a386d0f114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10053", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zpanel_username_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"shachibista\", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in ZPanel's htpasswd module. When\\n          creating .htaccess using the htpasswd module, the username field can be used to\\n          inject system commands, which is passed on to a system() function for executing\\n          the system's htpasswd command.\\n\\n          Please note: In order to use this module, you must have a valid account to login\\n          to ZPanel.  An account part of any of the default groups should suffice, such as:\\n          Administrators, Resellers, or Users (Clients).  By default, there's already a\\n          'zadmin' user, but the password is randomly generated.\", \"disclosure_date\": \"2013-06-07\", \"fullname\": \"exploit/unix/webapp/zpanel_username_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"ZPanel 10.0.0.2 htpasswd Module Username Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/zpanel_username_exec.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"unix/webapp/zpanel_username_exec\", \"references\": [\"CVE-2013-10053\", \"OSVDB-94038\", \"URL-https://github.com/bobsta63/zpanelx/commit/fe9cec7a8164801e2b3755b7abeabdd607f97906\", \"URL-http://forums.zpanelcp.com/showthread.php?27898-Serious-Remote-Execution-Exploit-in-Zpanel-10-0-0-2\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"ZPanel 10.0.0.2 on Linux\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:53.172690Z"}, {"uuid": "4e77c740-2add-40c6-a84d-9572b767f8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10057", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/synactis_connecttosynactis_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"h1ch4m\", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Synactis' PDF In-The-Box ActiveX\\n          component, specifically PDF_IN_1.ocx.  When a long string of data is given\\n          to the ConnectToSynactis function, which is meant to be used for the ldCmdLine\\n          argument of a WinExec call, a strcpy routine can end up overwriting a TRegistry\\n          class pointer saved on the stack, resulting in arbitrary code execution under the\\n          context of the user.\\n\\n          Also note that since the WinExec function is used to call the default browser,\\n          you must be aware that: 1) The default must be Internet Explorer, and 2) when the\\n          exploit runs, another browser will pop up.\\n\\n          Synactis PDF In-The-Box is also used by other software such as Logic Print 2013,\\n          which is how the vulnerability was found and publicly disclosed.\", \"disclosure_date\": \"2013-05-30\", \"fullname\": \"exploit/windows/browser/synactis_connecttosynactis_bof\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Synactis PDF In-The-Box ConnectToSynactic Stack Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/synactis_connecttosynactis_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/synactis_connecttosynactis_bof\", \"references\": [\"CVE-2013-10057\", \"OSVDB-93754\", \"EDB-25835\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"IE 7 on Windows XP SP3\", \"IE 8 on Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:15.193262Z"}]}