12781 matches found
Online Bus Ticketing 1.0 Insecure Direct Object Reference
============================================================================================================================================= | Title : Online Bus Ticketing v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bits ...
PT-2024-29666 · Kirby · Kirby
Name of the Vulnerable Software and Affected Versions: Kirby versions prior to 3.6.6.6 Kirby versions prior to 3.7.5.5 Kirby versions prior to 3.8.4.4 Kirby versions prior to 3.9.8.2 Kirby versions prior to 3.10.1.1 Kirby versions prior to 4.3.1 Description: Kirby is a CMS targeting designers and...
Kirby 安全漏洞
Kirby is a file-based content management system CMS from Kirby Open Source. A security vulnerability exists in Kirby that stems from insufficient permission checking in the language settings, allowing an attacker with Panel access to manipulate the language definitions...
MSMS-PHP 1.0 Insecure Settings
============================================================================================================================================= | Title : MSMS-PHP v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits...
CVE-2024-45264
A cross-site request forgery CSRF vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges...
CVE-2024-45264
A cross-site request forgery CSRF vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges...
PT-2024-31521 · Skysystem · Skysystem Arfa-Cms
Name of the Vulnerable Software and Affected Versions: SkySystem Arfa-CMS versions prior to 5.1.3124 Description: A cross-site request forgery CSRF vulnerability in the admin panel allows remote attackers to add a new administrator, leading to escalation of privileges. This issue enables attacker...
CVE-2024-45264
Summary: CVE-2024-45264 is a CSRF vulnerability in the admin panel of SkySystem Arfa-CMS, prior to version 5.1.3124, enabling an attacker to add a new administrator and escalate privileges. Affected software: SkySystem Arfa-CMS.Vulnerable component: Admin panel exposed CSRF vulnerability.Root cau...
Login System Project 1.0 SQL Injection
============================================================================================================================================= | Title : Login System Project 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 129.0.1 6...
SkySystem Arfa-CMS 安全漏洞
SkySystem Arfa-CMS is a content management system from SkySystem, Inc. A security vulnerability exists in SkySystem Arfa-CMS version 5.1.3124 and prior versions, which stems from a cross-site request forgery CSRF vulnerability in the admin panel...
Helpdeskz 2.0.2 Cross Site Scripting
Exploit Title: Stored XSS Vulnerability via File Name Google Dork: N/A Date: 08 Aug 2024 Exploit Author: Md. Sadikul Islam Vendor Homepage: https://www.helpdeskz.com/ Software Link: https://github.com/helpdesk-z/helpdeskz-dev/archive/2.0.2.zip Version: v2.0.2 Tested on: Kali Linux / Firefox...
The vulnerability of the ajaxterm module in the Webmin hosting control panel allows a attacker to perform a CSRF attack.
The vulnerability of the ajaxterm module in the Webmin hosting control panel is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack using a specially created web page...
Helpdeskz v2.0.2 - Stored XSS Vulnerability
Exploit Title: Stored XSS Vulnerability via File Name Exploit Author: Md. Sadikul Islam Vendor Homepage: https://www.helpdeskz.com/ Software Link: https://github.com/helpdesk-z/helpdeskz-dev/archive/2.0.2.zip Version: v2.0.2 Tested on: Kali Linux / Firefox 115.1.0esr 64-bit CVE : N/A Payload: "...
Helpdeskz v2.0.2 - Stored XSS
Exploit Title: Stored XSS Vulnerability via File Name Google Dork: N/A Date: 08 Aug 2024 Exploit Author: Md. Sadikul Islam Vendor Homepage: https://www.helpdeskz.com/ Software Link: https://github.com/helpdesk-z/helpdeskz-dev/archive/2.0.2.zip Version: v2.0.2 Tested on: Kali Linux / Firefox...
Virtuozzo Hybrid Infrastructure 6.2 Update 1 (6.2.1-51)
In this release, Virtuozzo Hybrid Infrastructure provides stability and performance improvements, as well as addresses issues found in previous releases. Vulnerability id: VSTOR-68405 Failed to deploy the compute cluster due to an issue with the default storage policy. Vulnerability id: VSTOR-880...
GO-2022-0342 Grafana XSS in Dashboard Text Panel in github.com/grafana/grafana
Grafana XSS in Dashboard Text Panel in github.com/grafana/grafana...
CVE-2024-42612
Pligg CMS v2.0.2 is affected by a CSRF vulnerability that can be triggered through /admin/domain_management.php?whitelist_add. The root cause is insufficient verification of the request origin trusted user, enabling an attacker to forge malicious actions. Documented impact includes the ability to...
DEBIAN-CVE-2024-42309
In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psbintellvdsgetmodes In psbintellvdsgetmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a possible NULL pointer dereference on failure of...
InnoCMS 代码注入漏洞
InnoCMS is a lightweight enterprise official website system from InnoCMS, Inc. A code injection vulnerability exists in InnoCMS version 0.3.1, which stems from the fact that some unknown handling of the file /panel/pages/1/edit can lead to code injection...
Build Your Own Botnet 2.0.0 Remote Code Execution
Exploit Title: BYOB Build Your Own Botnet v2.0.0 Unauthenticated RCE Remote Code Execution Date: 2024-08-14 Exploit Author: @chebuya Software Link: https://github.com/malwaredllc/byob Version: v2.0.0 Tested on: Ubuntu 22.04 LTS, Python 3.10.12, change numpy==1.17.3-numpy CVE: CVE-2024-?????,...