EUVD-2006-1718

Malware in sbrugna...

CVE-2025-57516

CVE-2025-57516: OS command injection in PublicCMS versions 5.202506.a and 5.202506.b. The vulnerability arises from processing crafted DATABASE, USERNAME, or PASSWORD variables passed to backupDB.bat, enabling arbitrary command execution. Affected documentation from multiple sources confirms the ...

MTN Group: PHP Info Exposing Secrets at https://radio.mtn.bj/info

Summary: During recon I discovered a PHP Info file exposing environment variables such as; Laravel APPKEY, Database username/password, SMTP username/password, etc. Steps To Reproduce: Visit the following URL; https://radio.mtn.bj/info You will be presented with a PHP Info file exposing environmen...

gravityBad.txt

4.22 07/08/2005 Gravity Board X v1.1 possibly prior versions Remote code execution, SQL Injection / Login Bypass, cross site scripting, path disclosure poc software: author site: http://www.gravityboardx.com/ a Sql Injection / Login Bypass: A user can bypass login check and grant administrator...