FluxBB 1.5.11 Cross Site Scripting

FluxBB version 1.5.11 suffers from a persistent cross site scripting vulnerability. Exploit Title: FluxBB 1.5.11 Stored xss Date: 3/8/2025 Exploit Author: Chokri Hammedi Vendor Homepage: www.fluxbb.org Software Link: https://www.softaculous.com/apps/forums/FluxBB Version: FluxBB 1.5.11 Tested on:...

OpenPanel security vulnerabilities

Open Panel is an open source game server control panel. An elevation of privilege vulnerability exists in Open Panel. An attacker can exploit this vulnerability to escalate privileges via the Fix Privileges feature...

CVE-2024-13147

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: before 15.01.2025...

Cross-site Scripting (XSS)

openmage/magento-lts LTS is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input validation due to the ability to execute scripts in the admin panel, potentially leading to XSS attacks against authenticated admin users...

GHSA-7G95-JMG9-H524 Jenkins cross-site request forgery (CSRF) vulnerability

Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not require POST requests for the HTTP endpoint toggling collapsed/expanded status of sidepanel widgets e.g., Build Queue and Build Executor Status widgets, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability...

E-commerce website injection vulnerabilities

Ecommerce-Website is a complete e-commerce website with an administration panel built using PHP and MySql. An injection vulnerability exists in Ecommerce-Website version 1.0, which stems from an incorrect operation of the parameter proid that can lead to SQL injection...

Monstra CMS 3.0.4 Remote Command Execution

Monstra CMS version 3.0.4 proof of concept remote command execution exploit. Exploit Title: Monstra CMS 3.0.4 - Remote Code Execution Date: 05.03.2024 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://monstra.org/ Software Link: https://monstra.org/monstra-3.0.4.zip Version: 3.0.4 Tested...

Hestia Control Panel 1.9.3 Remote Code Execution

Hestia Control Panel version 1.9.3 suffers from a remote command execution vulnerability. Exploit Title: Hestia Control Panel Remote Code Execution Google Dork: N/A Date: 05-03-2025 Exploit Author: Buğra Enis Dönmez n3c1 Vendor Homepage: https://hestiacp.com/ Software Link: https://hestiacp.com/...

Jasmin Ransomware SQL Injection / Authenticaton Bypass Vulnerability

Exploit Title: Jasmin Ransomware SQL Injection Login Bypass Exploit Author: Buğra Enis Dönmez n3c1 Vendor Homepage: https://github.com/codesiddhant/Jasmin-Ransomware Software Link: https://github.com/codesiddhant/Jasmin-Ransomware Version: N/A Tested on: Windows How to exploit : -- Open Admin Pan...

CVE-2024-13147

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: before 15.01.2025...

CVE-2024-13147

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: before 15.01.2025...

CVE-2024-13147

CVE-2024-13147 describes an SQL Injection in Merkur Software’s B2B Login Panel. The vulnerability stems from improper neutralization of special elements in SQL queries, affecting the B2B Login Panel prior to 15.01.2025. Documents consistently identify this as a SQLi flaw with high potential impac...

CVE-2024-13147 SQLi in Merkur Software's B2B Login Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: before 15.01.2025...

CVE-2024-13147 SQLi in Merkur Software's B2B Login Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: before 15.01.2025...

CVE-2025-1872

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "sadminusername" parameter in admin/add-subadmins.php...

IBM App Connect Enterprise File Write

The vulnerability of the bar files in the control panel of the IBM App Connect Enterprise software relates to incorrect path name restrictions for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to write any files into the file system remotely...

Merkur Software B2B Login Panel has a SQL injection vulnerability

Merkur Software B2B Login Panel is a B2B login panel from Merkur Software. A SQL injection vulnerability exists in Merkur Software B2B Login Panel versions prior to 15.01.2025 that stems from the presence of SQL injection...

WAGO Touch Panel security vulnerabilities

WAGO Touch Panel is a series of touch panels from the German company WAGO. A security vulnerability exists in WAGO Touch Panel that originates from a low-privileged user being able to manipulate the memory size, potentially causing the application to crash...

PT-2025-9832

Name of the Vulnerable Software and Affected Versions Merkur Software B2B Login Panel versions prior to 15.01.2025 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

Jasmin Ransomware SQL Injection / Authenticaton Bypass

Jasmin Ransomware suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: Jasmin Ransomware SQL Injection Login Bypass Google Dork: N/A Date: 05-03-2025 Exploit Author: Buğra Enis Dönmez n3c1 Vendor Homepage:...