CVE-2020-25499

TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router...

CVE-2020-12495

Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. T...

LibreHealth 2.0.0 Remote Code Execution Exploit

Exploit Title: LibreHealth v2.0.0 - Authenticated Remote Code Execution Exploit Author: Bobby Cooke Vendor Homepage: https://librehealth.io/ Software Link: https://github.com/LibreHealthIO/lh-ehr Version: 2.0.0 Tested On: Windows 10 Pro 1909 x6486 + XAMPP 7.4.4 Exploit Tested Using: Python 2.7.17...

CVE-2020-11438

LibreHealth EMR v2.0.0 is affected by systemic CSRF...

Design/Logic Flaw

LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators...

CVE-2020-11436

LibreHealth EMR v2.0.0 is reported vulnerable to cross-site scripting (XSS) that can force arbitrary actions on behalf of other users, including administrators. The connected sources confirm the affected product and the impact (unauthorized actions by different user roles), but they do not provid...

CVE-2020-11439

CVE-2020-11439 affects LibreHealth EMR v2.0.0. The connected sources describe a Local File Inclusion vulnerability that enables inclusion and execution of arbitrary PHP within the EMR application. The datasets consistently identify the impact as arbitrary code execution via LFI, but do not provid...

UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read

UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Exploit Title: UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Google Dork: inurl:"laravel-filemanager?type=Files" -site:github.com -site:github.io Date: 2020-02-04 Exploit Author: NgoAnhDuc Vendor Homepage:...

Input validation

Incorrect username validation in the registration process of CTFd v2.0.0 - v2.2.2 allows an attacker to take over an arbitrary account if the username is known and emails are enabled on the CTFd instance. To exploit the vulnerability, one must register with a username identical to the victim's...

CVE-2018-3757

Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter...

CVE-2017-16010

i18next is a language translation framework. When using the .init method, passing interpolation options without passing an escapeValue will default to undefined rather than the assumed true. This can result in a cross-site scripting vulnerability because user input is assumed to be escaped, but i...

Serva v2.0.0 DNS Server QueryName Remote Denial of Service Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Serva v2.0.0 DNS Server QueryName Remote Denial of Service Vulnerability Version: v2.0.0 Date: 2013-01-14 Author: Julien Ahrens @MrTuxracer Homepage: www.inshell.net Software Link: http://www.vercot.com Tested on:...

Serva v2.0.0 HTTP Server GET Remote Denial of Service Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Serva v2.0.0 HTTP Server GET Remote Denial of Service Vulnerability Version: v2.0.0 Date: 2013-01-14 Author: Julien Ahrens @MrTuxracer Homepage: www.inshell.net Software Link: http://www.vercot.com Tested on: Windo...

Serva 2.0.0 - DNS Server QueryName Remote Denial of Service

Serva 2.0.0 - DNS Server QueryName Remote Denial of Service !/usr/bin/python Exploit Title: Serva v2.0.0 DNS Server QueryName Remote Denial of Service Vulnerability Version: v2.0.0 Date: 2013-01-14 Author: Julien Ahrens @MrTuxracer Homepage: www.inshell.net Software Link: http://www.vercot.com...

Serva 2.0.0 - HTTP Server GET Remote Denial of Service

Serva 2.0.0 - HTTP Server GET Remote Denial of Service !/usr/bin/python Exploit Title: Serva v2.0.0 HTTP Server GET Remote Denial of Service Vulnerability Version: v2.0.0 Date: 2013-01-14 Author: Julien Ahrens @MrTuxracer Homepage: www.inshell.net Software Link: http://www.vercot.com Tested on:...

Serva 2.0.0 - DNS Server QueryName Remote Denial of Service

!/usr/bin/python Exploit Title: Serva v2.0.0 DNS Server QueryName Remote Denial of Service Vulnerability Version: v2.0.0 Date: 2013-01-14 Author: Julien Ahrens @MrTuxracer Homepage: www.inshell.net Software Link: http://www.vercot.com Tested on: Windows XP SP3 Professional German Notes: Malformed...

Social Media 2.0.0 Local File Inclusion

x========================================================================================================================================x | Title : Social Media v2.0.0 LFI Vulnerabilities | Software : Social Media v2.0.0 | Vendor : http://www.mediascripts.com/ | Demo :...

Social Media v2.0.0 LFI Vulnerabilities

Exploit for php platform in category web applications ======================================= Social Media v2.0.0 LFI Vulnerabilities =======================================...

Xbtit v2.0.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================== Xbtit v2.0.0 SQL Injection Vulnerability ======================================== Title : Xbtit SQL Injection Vulnerability Author : Ctacok Homepage : http://ctacok.ru/ Vulnerable File :...

ezcontents-sql.txt

...:::::ezContents CMS Version 2.0.0 SQL Injection Vulnerabilities ::::... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the worl...