CVE-2021-33469

COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting XSS via the "Admin name" parameter...

CVE-2021-33469

COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting XSS via the "Admin name" parameter...

CVE-2021-33470

COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel...

CVE-2021-33470

COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel...

CVE-2021-33469

CVE-2021-33469 affects COVID19 Testing Management System 1.0 with a cross-site scripting (XSS) flaw exploitable via the Admin name parameter. Multiple connected sources corroborate the issue across NVD/Red Hat/NVD and third-party feeds, consistently describing XSS in version 1.0. Root cause detai...

What Is The High Orbit Ion Cannon (HOIC)❓ Defend methods

High Orbit Ion Cannon HOIC is a platform that offers open-source network stress testing features. Used by people with the intend of attacking a server. With the application, you’ll be able to carry out denial of service DoS and distributed denial of service DDoS attacks. The primary purpose of...

COVID19 Testing Management System 跨站脚本漏洞

COVID19 Testing Management System is a COVID19 Testing Management System. A cross-site scripting vulnerability exists in COVID19 Testing Management System version 1.0, which can be exploited via the Admin name parameter...

COVID19 Testing Management System SQL注入漏洞

COVID19 Testing Management System is a COVID19 Testing Management System. A SQL injection vulnerability exists in COVID19 Testing Management System version 1.0, which is exploited via the admin panel...

PT-2021-20141 · Unknown · Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: COVID19 Testing Management System version 1.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the Admin name parameter. Recommendations: For COVID19 Testing Management System version 1.0,...

Solr-GRAB - Steal Apache Solr Instance Queries With Or Without A Username And Password

Steal Apache Solr instance Queries with or without a username and password. DISCLAIMER : This project should be used for authorized testing and educational purposes only. Download git clone https://github.com/GnosticPlayers/Solr-GRAB Usage You can search for Apache Solr Instances via Censys, with...

The vulnerability of Intel ADAS IE software for autonomous driving, which arises due to insufficient testing of input data, allows a violator to increase their privileges.

The vulnerability of Intel ADAS IE software for autonomous driving exists due to insufficient testing of input data. Exploiting this vulnerability can allow hackers to gain increased privileges...

AutoPentest-DRL - Automated Penetration Testing Using Deep Reinforcement Learning

AutoPentest-DRL is an automated penetration testing framework based on Deep Reinforcement Learning DRL techniques. The framework determines the most appropriate attack path for a given network, and can be used to execute a simulated attack on that network via penetration testing tools, such as...

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments, referred to as 'Vulhub'. It is not a specific exploit or tool, but rather a collection of vulnerable environments for testing and learning purposes. The repository contains various vulnerable docker...

jexboss

Exploit module/targeting JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. The provided code is a Python script that appears to be a tool for testing and exploiting vulnerabilities in JBoss Application Server and other Java-based platforms. The script is written i...

Spotweb-Develop 1.4.9 Cross Site Scripting

Exploit Title: Cross Site Scripting DOM Based spotweb-develop 1.4.9 Author: @nu11secur1ty Testing and Debugging: nu11secur1ty $ OWASP-ZAP Date: 05.20.2021 Vendor: https://www.nzbserver.com/ Link: https://github.com/spotweb/spotweb CVE: 2021-XXXX Proof: https://streamable.com/hix5o1 + Exploit...

OPENSUSE-SU-2021:0752-1 Security update for jhead

This update for jhead fixes the following issues: jhead was updated to 3.06.0.1 lot of fuzztest fixes Apply a whole bunch of patches from Debian. Spell check and fuzz test stuff from Debian, nothing useful to human users. Add option to set exif date from date from another file. Bug fixes relating...

Pega Infinity patches authentication vulnerability

Security researchers came across a Pega Infinity vulnerability through participation in Apple’s bug bounty program, after focusing on vendors that supplied technology to Apple. By using Burp Suite—an integrated platform for performing security testing of web applications—the security researchers...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a perpetrator to gain read access to data, modify data, or cause partial service disruption.

The vulnerability of the Outside In Filters component within Oracle’s software development kit SDK “Outside In Technology” exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to gain read access to data, modify, add, or delete data, or cause a...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a hacker to gain access to data for reading purposes.

The vulnerability of the Outside In Filters component within Oracle’s SDK for software development tools exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to gain access to data through HTTP requests...

COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting (XSS)

Exploit Title: COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting XSS Date: 19/05/2021 Exploit Author: Rohit Burke Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/ Version: 1.0 Tested on:...