kadimus

kadimus LFI Scan & Exploit Tool kadimus is a tool to check for and exploit LFI vulnerabilities, with a focus on PHP systems. Features: Check all url parameters /var/log/auth.log RCE /proc/self/environ RCE php://input RCE data://text RCE expect://cmd RCE Source code disclosure Command shell...

Cross-site scripting (XSS) stored in href bypasses filter using data wrapper

Description The XSS Cross-Site Scripting vulnerability found in the Caliber-Web application allows an attacker to inject malicious JavaScript code into a href via a data wrapper, containing a base64-encoded payload. This vulnerability specifically occurs in a book's Tag editing functionality. By...

Privilege Escalation

PostgreSQL is vulnerable to privilege escalation attacks. A remote authenticated user could exploit a flaw in the foreign data wrapper functionality to view passwords in the pgusermappings catalog view which leads to a disclosure of authentication information...