873 matches found
Researcher Publishes Patch Bypass for vBulletin 0-Day
A security researcher has published proof-of-concept code to outsmart a patch issued last year for a zero-day vulnerability discovered in vBulletin, a popular software for building online community forums. Calling a patch for the flaw a “fail” and “inadequate in blocking exploitation,” Austin-bas...
CVE-2020-9496
XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03...
With Pre-Auth policy in place, users get “Error: Not a privilege User” after logging in
From client machine Access website EPA kicks in and successful EPA response Got the login page Two factor Enter the Username and password Got an error “Not a privilege user” and stuck at /cgi/login...
PHP-Fusion 9.03.60 PHP Object Injection / SQL Injection
PHP-Fusion version 9.03.60 PHP object injection to SQL injection pre-authentication exploit. Exploit Title: PHP-Fusion v9.03.60, PHP Object Injection to SQL injection pre-auth Date: 2020-05-26 Exploit Author: coiffeur Vendor Homepage: https://www.php-fusion.co.uk/home.php Software Link:...
PHP-Fusion 9.03.60 PHP Object Injection / SQL Injection
Exploit Title: PHP-Fusion v9.03.60, PHP Object Injection to SQL injection pre-auth Date: 2020-05-26 Exploit Author: coiffeur Vendor Homepage: https://www.php-fusion.co.uk/home.php Software Link: https://www.php-fusion.co.uk/phpfusion9downloads.php Version: v9.03.60 import sys import requests impo...
UBUNTU-CVE-2020-12398
If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent without protection. This vulnerability affects Thunderbird 68.9.0...
Cayin Digital Signage System xPost 2.5 Code Execution / SQL Injection
!/usr/bin/env python3 Cayin Digital Signage System xPost 2.5 Pre-Auth SQLi Remote Code Execution Vendor: CAYIN Technology Co., Ltd. Product web page: https://www.cayintech.com Affected version: 2.5.18103 2.0 1.0 Summary: CAYIN xPost is the web-based application software, which offers a combinatio...
Cayin Digital Signage System xPost 2.5 - Remote Command Injection
Title: Cayin Digital Signage System xPost 2.5 - Remote Command Injection Author:LiquidWorm Date: 2020-06-04 Vendor: https://www.cayintech.com CVE: N/A !/usr/bin/env python3 Cayin Digital Signage System xPost 2.5 Pre-Auth SQLi Remote Code Execution Vendor: CAYIN Technology Co., Ltd. Product web...
Exploit for CVE-2020-11651
CVE-2020-11651 is a proof-of-concept PoC exploit for a vulnerability in the SaltStack master. The exploit is designed to obtain pre-auth RCE Remote Code Execution on a SaltStack master and all associated minions. The vulnerability is not explicitly stated in the provided code, but it is likely...
Exploit for Incorrect Authorization in Qnap Photo_Station
QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Exploit...
Exploit for Incorrect Authorization in Qnap Photo_Station
QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Checker...
CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability
A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with either the administration HTTPS service or the User Portal exposed on the WAN zone. A successful attack...
CVE-2018-11106
NETGEAR has released fixes for a pre-authentication command injection in requesthandler.php security vulnerability on the following product models: WC7500, running firmware versions prior to 6.5.3.5; WC7520, running firmware versions prior to 2.5.0.46; WC7600v1, running firmware versions prior to...
Zyxel CNM SecuManager 3.1.0 / 3.1.1 Hardcoded Keys / XSS / Code Execution
Hello, Please find a text-only version below sent to security mailing lists. The HTML version on "Multiple vulnerabilities found in Zyxel CNM SecuManager" is posted here: https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html === text-version of the advisory ===...
Immunity Canvas: SMBGHOST
Name| SMBGHOST ---|--- CVE| CVE-2020-0796-1 Exploit Pack| CANVAS Description| SMBGHOST Notes| CVE Name: CVE-2020-0796 VENDOR: Microsoft NOTES: some notes here VersionsAffected: VERSIONS Repeatability: None References:...
Liferay CE 6.0.2 Java Deserialization
Liferay CE 6.0.2 remote code execution via unsafe deserialization Recent assessments: theguly at March 02, 2020 5:11pm UTC reported: on 29th of january 2020 this github1 repo came up, with some newsfeed, speakin about a RCE via deserialization on Liferay 6.0.2 i’m aware that liferay is widely use...
Sql injection
TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...
CVE-2020-3934 TAIWAN SECOM CO., LTD. - Pre-auth SQL Injection
TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...
Apple iOS v13.x (AirDrop) - (AirDoS) Denial of Service PoC
Document Title: =============== Apple iOS v13.x AirDrop - AirDoS Denial of Service PoC References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2192 Video: https://www.youtube.com/watch?v=pLpJIo-GcbQ Apple Acknowledgements: https://support.apple.com/en-us/HT210785...
Apple iOS v13.x (AirDrop) - (AirDoS) Denial of Service PoC
Document Title: =============== Apple iOS v13.x AirDrop - AirDoS Denial of Service PoC References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2192 Video: https://www.youtube.com/watch?v=pLpJIo-GcbQ Apple Acknowledgements: https://support.apple.com/en-us/HT210785...