1093 matches found
LibreNMS addhost Command Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'LibreNMS addhost Command Injection', 'Description' = %q This module exploits a command injection vulnerability in the open source network...
CVE-2018-5408 PrinterLogic Print Management Software fails to validate the management portal SSL certificates
The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterLogic management portal's SSL certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by using a...
Clinic Pro 4 SQL Injection
Title: Clinic Pro - Clinic Management Software Date: 03.04.2019 Exploit Author: Abdullah Çelebi Vendor Homepage: https://softwebinternational.com Software Link: https://cms.softwebinternational.com Category: Webapps Tested on: WAMPP @Win Software description: It is developed by PHP Codeigniter...
Lobby Track Desktop Elevation of Privilege Vulnerability
Jolly Technologies Lobby Track Desktop is a desktop visitor management application from Jolly Technologies USA. The program has features such as pre-registering visitors, capturing photos and scanning driver's licenses. An elevation vulnerability exists in Jolly Technologies Lobby Track Desktop...
Information Leakage Vulnerability in Technology Management System of Iris Software (Shenzhen) Co.
Iris Software Shenzhen Limited Technology Management System is a capital project management software. There is an information leakage vulnerability in the Technology Management System of Iris Software Shenzhen Co. Ltd. that can be exploited by attackers to obtain sensitive information...
Critical Flaw Uncovered In WordPress That Remained Unpatched for 6 Years
Exclusive — If you have not updated your website to the latest WordPress version 5.0.3, it's a brilliant idea to upgrade the content management software of your site now. From now, I mean immediately. Cybersecurity researchers at RIPS Technologies GmbH today shared their latest research with The...
ABB Welcome Management Software Detection (Windows SMB Login)
Detects the installed version of ABB Welcome Management Software for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco SD-WAN Solution Privilege Permission and Access Control Vulnerability
Cisco vBond Orchestrator Software and other products are from Cisco. cisco vBond Orchestrator Software is a set of security network extension management software. vEdge 100 Series Routers is a 100 series router product. SD-WAN Solution is a set of network extension solution running in it. A...
User logon gets stuck at " Please wait for the group policy Client" with UPM
When trying to log into a session with a UPM profile process hangs at " Please wait for the Group policy client"...
HotelDruid 2.3 SQL Injection
Exploit Title: SQL Injection in HotelDruid version 2.3 Google Dork: N/A Date: 9-12-2018 Exploit Author: Sainadh Jamalpur Vendor Homepage: http://www.hoteldruid.com Software Link: https://sourceforge.net/projects/hoteldruid/ Version: 2.3 REQUIRED Tested on: Windows x64/ Kali linux x64 CVE : N/A...
HotelDruid 2.3.0 - id_utente_mod SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: SQL Injection in HotelDruid version 2.3 Google Dork: N/A Exploit Author: Sainadh Jamalpur Vendor Homepage: http://www.hoteldruid.com Software Link: https://sourceforge.net/projects/hoteldruid/ Version: 2.3 REQUIRED Tested on:...
HotelDruid 2.3.0 - id_utente_mod SQL Injection
HotelDruid 2.3.0 - idutentemod SQL Injection Exploit Title: SQL Injection in HotelDruid version 2.3 Google Dork: N/A Date: 9-12-2018 Exploit Author: Sainadh Jamalpur Vendor Homepage: http://www.hoteldruid.com Software Link: https://sourceforge.net/projects/hoteldruid/ Version: 2.3 REQUIRED Tested...
HotelDruid 2.3.0 - 'id_utente_mod' SQL Injection
Exploit Title: SQL Injection in HotelDruid version 2.3 Google Dork: N/A Date: 9-12-2018 Exploit Author: Sainadh Jamalpur Vendor Homepage: http://www.hoteldruid.com Software Link: https://sourceforge.net/projects/hoteldruid/ Version: 2.3 REQUIRED Tested on: Windows x64/ Kali linux x64 CVE : N/A...
SQL Injection Vulnerability in Chihuahua Software F22 Apparel Management Software
Guangzhou Zhihua Software Technology Co., Ltd. is a high-tech enterprise specializing in providing information technology solutions for brand-name apparel, shoes and bags enterprises. A SQL injection vulnerability exists in Chihuahua Software F22 Apparel Management Software. An attacker can explo...
CVE-2018-18396
Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...
CVE-2018-18391
User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...
Code injection
Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...
CVE-2018-18392
Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...