w33vils

1 exploit Active since Dec 2020
CVE-2020-35847 NOMISEC CRITICAL WORKING POC
Cockpit CMS NoSQLi to RCE
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.
CVSS 9.8