Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber versions prior to 1.2.16, which allows an...

PT-2021-11829 · Cacti +4 · Cacti +4

Name of the Vulnerable Software and Affected Versions: Cacti versions 1.2.x through 1.2.16 Description: A SQL injection issue in data debug.php allows remote authenticated attackers to execute arbitrary SQL commands via the site id parameter, potentially leading to remote code execution...

Brave Software: [ios] Address bar spoofing in Brave for iOS

Hey Summary: I've found an address bar spoofing vulnerability in the latest version of Brave for iOS. Products affected: Brave for iOS 1.2.16 Android maybe? PoC: html var spoof = function document.write"This is not Google"; document.location = "https://google.com:1234";...

MantisBT Admin SQL Injection Arbitrary File Read

Versions 1.2.13 through 1.2.16 are vulnerable to a SQL injection attack if an attacker can gain access to administrative credentials. This vuln was fixed in 1.2.17. Module Options msf use auxiliary/gather/mantisbt/adminsqli msf undefinedadminsqli show actions ...actions... msf undefinedadminsqli...

Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0;...