nosqli-flintcms

nosqli-flintcms Blindes noSQL-Injection-Fallstudienlabor basierend auf CVE-2018-3783 Privilegienerweiterung auf flintcms 1.1.9. Die Schwachstelle wurde ursprünglich von Benoit Côté-Jodoin entdeckt. Sie können den Originalbericht auf HackerOne lesen. Voraussetzungen root@kitploit: docker-compose...

rocketcat-cve-2021-22911-exploit

Exploit di Rocket.Chat CVE-2021-22911 ⚠️ AVVERTENZA - SOLO PER USO EDUCATIVO Questo exploit è destinato esclusivamente a test di penetrazione autorizzati e scopi educativi. L'accesso non autorizzato a sistemi informatici è illegale. L'autore non è responsabile per qualsiasi uso improprio. 📋...

GHSA-JHQ3-57XH-6643 Privilege Escalation due to Blind NoSQL Injection in flintcms

Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset. Recommendation Update to version 1.1.10 or later...

Privilege Escalation due to Blind NoSQL Injection in flintcms

Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset. Recommendation Update to version 1.1.10 or later...

Privilege Escalation due to Blind NoSQL Injection

Overview Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset. Recommendation Update to version 1.1.10 or later. References - HackerOne Report - GitHub Advisory...