kadimus

kadimus LFI Scan & Exploit-Tool kadimus ist ein Werkzeug zur Überprüfung und Ausnutzung von LFI-Schwachstellen, mit Schwerpunkt auf PHP-Systemen. Features: Alle URL-Parameter prüfen /var/log/auth.log RCE /proc/self/environ RCE php://input RCE data://text RCE expect://cmd RCE...

Cross-site scripting (XSS) stored in href bypasses filter using data wrapper

Description The XSS Cross-Site Scripting vulnerability found in the Caliber-Web application allows an attacker to inject malicious JavaScript code into a href via a data wrapper, containing a base64-encoded payload. This vulnerability specifically occurs in a book's Tag editing functionality. By...

Privilege Escalation

PostgreSQL is vulnerable to privilege escalation attacks. A remote authenticated user could exploit a flaw in the foreign data wrapper functionality to view passwords in the pgusermappings catalog view which leads to a disclosure of authentication information...