Daniel Barros

2 exploits Active since Aug 2023
CVE-2023-29689 EXPLOITDB CRITICAL text WORKING POC
PyroCMS 3.9 - Remote Code Execution via Server-Side Template Injection
PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template injection (SSTI) flaw. This vulnerability allows a malicious attacker to send customized commands to the server and execute arbitrary code on the affected system.
CVSS 9.8
CVE-2023-39147 EXPLOITDB HIGH python WORKING POC
Uvdesk 1.1.3 - Unauthenticated Arbitrary File Upload and Remote Code Execution via Image File
An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file.
CVSS 7.8