kadimus

kadimus LFIスキャン＆エクスプロイトツール kadimusは、LFIの脆弱性をチェックし、悪用するためのツールで、特にPHPシステムに焦点を当てています。 Features: すべてのURLパラメータをチェック /var/log/auth.log RCE /proc/self/environ RCE php://input RCE data://text RCE expect://cmd RCE ソースコード開示 HTTPリクエストを介したコマンドシェルインターフェース プロキシサポート socks4://, socks4a://, socks5:// ,socks5h://...

Cross-site scripting (XSS) stored in href bypasses filter using data wrapper

Description The XSS Cross-Site Scripting vulnerability found in the Caliber-Web application allows an attacker to inject malicious JavaScript code into a href via a data wrapper, containing a base64-encoded payload. This vulnerability specifically occurs in a book's Tag editing functionality. By...

Privilege Escalation

PostgreSQL is vulnerable to privilege escalation attacks. A remote authenticated user could exploit a flaw in the foreign data wrapper functionality to view passwords in the pgusermappings catalog view which leads to a disclosure of authentication information...