PT-2020-18493 · Blueonyx · Blueonyx

Name of the Vulnerable Software and Affected Versions: BlueOnyx version 5209R Description: The issue allows an attacker to access the dashboard and perform scraping or other analysis by exploiting a CSRF vulnerability in the "/login" URI. Recommendations: For BlueOnyx version 5209R, as a temporar...

elaniin CMS 1.0 - Authentication Bypass

elaniin CMS 1.0 - Authentication Bypass Exploit Title: elaniin CMS 1.0 - Authentication Bypass Author: riamloo Date: 2020-01-02 Vendor Homepage: https://elaniin.com/ github == https://github.com/elaniin/ Software Link: https://github.com/elaniin/CMS/archive/master.zip Version: 1 CVE: N/A Tested o...

Sangoma SBC 2.3.23-119-GA Authentication Bypass Vulnerability

A remotely exploitable vulnerability exists in the 2.3.23-119-GA version of Sangoma SBC that would allow an unauthenticated user to bypass authentication and login as a non-existent user but with complete access to the dashboard including additional privileged user creation capabilities...

Sangoma SBC 2.3.23-119-GA Authentication Bypass

Introduction Description A remotely exploitable vulnerability exists in the 2.3.23-119-GA version of Sangoma SBC that would allow an unauthenticated user to bypass authentication and login as a non-existen user but with complete access to the dashboard including additional privileged user creatio...

UBUNTU-CVE-2019-17382

An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password i.e., anonymously. All created elements...

Session fixation

A vulnerability in the session management functionality of the web UI for the Cisco Umbrella Dashboard could allow an authenticated, remote attacker to access the Dashboard via an active, user session. The vulnerability exists due to the affected application not invalidating an existing session...

PT-2019-16741 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.6.3 Moodle versions prior to 3.5.5 Moodle versions prior to 3.4.8 Moodle versions prior to 3.1.17 Description: A vulnerability was found that allows users with the login as other users capability, such as...

Moodle Design Vulnerability (CNVD-2018-10648)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in version 3.x of Moodle. An attacker could exploit th...

Hermosoft CMS Admin Page Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title : Hermosoft CMS Admin Page ByPass Exploit Author : xBADGIRL21 Dork: intext:Website Designed by Hermosoft, Dubai 2017. All rights reserved Tested on: Windows skype:xbadgirl21 Date: 11/04/2017 video Proof :...

WordPress Adminer Plugin Allows Public Admin (Local) Database Login Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The WordPress Adminer plugin allows public administrative local database logins, which can be exploited by an attacker to log...