Metasploit Wrap-Up

GSoC Rocks! In a rare double whammy, one of our 2020 Google Summer of Code GSoC participants has authored a PR containing both enhancements & a new module! Improvements to our SQL injection library now allow PostgreSQL injection, and this new functionality has been verified with both a test modul...

CVE-2019-13375

creationtimestamp| type| source ---|---|--- 2019-07-07 01:59:54+00:00| seen| https://t.me/cveNotify/288...

CVE-2019-13375

A SQL Injection was discovered in D-Link Central WiFi Manager CWM100 before v1.03R0100BETA6 in PayAction.class.php with the index.php/Pay/passcodeAuth parameter passcode. The vulnerability does not need any authentication...

CVE-2019-13375

CVE-2019-13375 relates to a SQL injection in the D-Link Central WiFi Manager CWM-100 (pre-1.03R0100_BETA6). The flaw resides in PayAction.class.php via the index.php/Pay/passcodeAuth parameter passcode, exploitable without authentication to leak data and modify the database. Connected Red Hat and...