Deltek Maconomy 2.2.5 - Local File Inclusion

Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.WMCS/ PATHINFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.WMCS/etc/passwd URI. id: CVE-2019-12314 info: name: Deltek Maconomy 2.2.5 - Local File Inclusion author: madrobot severity:...

mongo-express Remote Code Execution

mongo-express before 0.54.0 is vulnerable to remote code execution via endpoints that uses the toBSON method and misuse the vm dependency to perform exec commands in a non-safe environment. id: CVE-2019-10758 info: name: mongo-express Remote Code Execution author: princechaddha severity: critical...

WPGraphQL 0.2.3 - User Creation

The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutation. id: CVE-2019-9879 info: name: WPGraphQL 0.2.3 - User Creation author: DhiyaneshDk severity:...

Linear eMerge E3 - Cross-Site Scripting

Linear eMerge E3-Series devices are vulnerable to cross-site scripting via the 'layout' parameter. id: CVE-2019-7255 info: name: Linear eMerge E3 - Cross-Site Scripting author: arafatansari severity: medium description: | Linear eMerge E3-Series devices are vulnerable to cross-site scripting via...

WordPress Google Maps <7.11.18 - SQL Injection

WordPress Google Maps plugin before 7.11.18 contains a SQL injection vulnerability. The plugin includes /class.rest-api.php in the REST API and does not sanitize field names before a SELECT statement. An attacker can possibly obtain sensitive information from a database, modify data, and execute...

GrandNode 4.40 - Local File Inclusion

GrandNode 4.40 is susceptible to local file inclusion in Controllers/LetsEncryptController.cs, which allows remote unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. id: CVE-2019-12276 info: name: GrandNode 4.40...

QNAP Photo Station - Path Traversal

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. id: CVE-2019-7195 info: name: QNAP Photo Station - Path Traversal author: s4e-io severity: critical description: | QNAP devices running Pho...

Citrix SD-WAN and NetScaler SD-WAN - SQL Injection

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 contain an SQL injection vulnerability. An unauthenticated attacker can exploit improper validation of input in specific components, which could allow for execution of arbitrary SQL queries against the backend database...

CVE-2019-1068

CVE-2019-1068 Ursachenanalyse und PoC für eine Microsoft SQL Server Stack-Overflow-Sicherheitslücke durch Reverse Engineering von „svl.dll“. Links zu unserer Arbeit: 1. Ataberk's Blog 2. Fatih's Blog 3. Cem's Blog https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1068...

cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE स्टैक ओवरफ़्लो → RCE लैब CVE-2019-13132 के लिए पूर्ण-अंत तक काम करने वाला RCE एक्सप्लॉइट + पुनरुत्पादन योग्य लैब, जो libzmq के CURVE INITIATE हैंडशेक हैंडलर में स्टैक बफ़र ओवरफ़्लो है। एक हमलावर जो सर्वर की दीर्घकालिक सार्वजनिक कुंजी जो डिज़ाइन के अनुसार एक...

massCitrix

massCitrix Codice sviluppato per la verifica di massa della vulnerabilità CVE-2019-19781 degli host scoperti da Shodan. Pull requests sono benvenuti...

CVE-2019-7214

CVE-2019-7214 Esecuzione di codice remoto nella deserializzazione .NET per il sistema SmarterMail. Raccolta In questo repository è disponibile una raccolta di proof of concept per l'exploit. Alcune potrebbero funzionare come previsto senza modifiche, altre potrebbero richiederle...

cve-2019-0604-SP2010-netv3.5

cve-2019-0604-SP2010-netv3.5 Kürzlich bin ich auf eine SharePoint 2010 SP2 gestoßen und alle Proofs of Concept, die ich getestet habe, funktionierten nicht, bis ich erkannte, dass der Server auf .net 3.5 lief, was eine andere Bibliothek erfordert. Hier ist die .dll für .net 3.5. Der Code stammt v...

46635.py_CVE-2019-9053

46635.pyCVE-2019-9053 Este é o código modificado do exploit 46635 de python2 para python3. O arquivo run contém o código modificado 46635 . . Baixe o arquivo run e use isto...

ScreenConnect-UserEnum

ScreenConnect-UserEnum ConnectWise, noto anche come ScreenConnect, presenta una vulnerabilità di enumerazione utenti. Questo è uno strumento di enumerazione utenti per tale vulnerabilità. CVE-2019-16516 vulnerabile = 19.2.24707 ??? non ho ben capito se è stato corretto nelle versioni successive...

check-your-pulse

check-your-pulse Questa utility può aiutare a determinare se esistono indicatori di compromissione IOC nei file di log di un'appliance Pulse Secure VPN per CVE-2019-11510. La Cybersecurity and Infrastructure Security Agency CISA ha visto molte organizzazioni violare nonostante avessero installato...

CVE-2019-14287-CVE-2014-6271

Dieses Repository hat keine README-Datei...

test-xss-swagger-CVE-2019-1749

Dieses Repository hat keine README-Datei...

CVE-2019-11933

Questo repository non contiene un README...

CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit

CMS-Made-Simple-2.2.10---SQL-Injection-Exploit-con-correzione-di-Bug L'exploit è stato corretto per supportare python 3 CVE-2019-9053 Fonte dell'exploit originale: https://www.exploit-db.com/exploits/46635 Possibile errore e sua correzione Traceback most recent call last: File "46635.py", line 12...