GetSimple CMS Multi User 1.8.2 Cross Site Request Forgery

Exploit Title: GetSimple CMS Plugin Multi User v1.8.2 - Cross-Site Request Forgery Delete Admin/User Exploit Author: Bobby Cooke boku & Adeeb Shah @hyd3sec Date: August 12, 2020 Vendor Homepage: http://get-simple.info/extend/plugin/multi-user/133/ Software Link:...

GetSimple CMS Plugin Multi User 1.8.2 - Cross-Site Request Forgery (Add Admin) Vulneraility

Exploit for php platform in category web applications Exploit Title: GetSimple CMS Plugin Multi User v1.8.2 - Cross-Site Request Forgery Add Admin Exploit Author: Bobby Cooke boku & Adeeb Shah @hyd3sec Vendor Homepage: http://get-simple.info/extend/plugin/multi-user/133/ Software Link:...

GetSimple CMS Plugin Multi User 1.8.2 - Cross-Site Request Forgery (Add Admin)

Exploit Title: GetSimple CMS Plugin Multi User v1.8.2 - Cross-Site Request Forgery Add Admin Exploit Author: Bobby Cooke boku & Adeeb Shah @hyd3sec Date: August 2020-08-12 Vendor Homepage: http://get-simple.info/extend/plugin/multi-user/133/ Software Link:...

DeimosC2 - A Golang Command And Control Framework For Post-Exploitation

DeimosC2 is a post-exploitation Command & Control C2 tool that leverages multiple communication methods in order to control machines that have been compromised. DeimosC2 server and agents works on, and has been tested on, Windows, Darwin, and Linux. It is entirely written in Golang with a front e...

[SECURITY] Fedora 31 Update: community-mysql-8.0.20-1.fc31

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

[SECURITY] Fedora 30 Update: community-mysql-8.0.20-1.fc30

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

SQL Injection Vulnerability in Hongyu Multi-User Mall System

Ltd. is an information technology service-oriented, based on the forefront of high-tech fields, specializing in network Web development and application of high-tech enterprises. There is a SQL injection vulnerability in Hongyu Multi-User Mall System, which can be exploited by attackers to obtain...

ansible: secrets readable after ansible-vault edit

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and t...

Denial Of Service (DoS)

pidgin is vulnerable to denial of service. A denial of service flaw was found in Finch's XMPP chat implementation, when using multi-user chat. If a Finch user in a multi-user chat session were to change their nickname to contain the HTML "br" element, it would cause Finch to crash...

SQL Injection Vulnerability in B2B2C Multi-User Mall System (CNVD-2020-26551)

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. There is a SQL injection vulnerability in the B2B2C Multi-User Mall system, which can be exploited by attackers to obtain sensitive information from the databa...

UBUNTU-CVE-2020-1740

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and t...

UPDATE: Empire 3.1.0

Empire 3.1.0 was released a few hours ago! If you remember, I briefly mentioned about this tool in my five month old post titled – List of Open Source C2 Post-Exploitation Frameworks. It’s a very good thing that, BC-Security has taken over the development of the tool and has made some awesome...

[SECURITY] Fedora 31 Update: community-mysql-8.0.19-1.fc31

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

[SECURITY] Fedora 30 Update: community-mysql-8.0.19-1.fc30

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

XSS Vulnerability in Ridewind's Multi-User PHP Statistics System

Ride the wind multi-user PHP statistics system can be statistics PV and IP traffic , can be used for online store statistics , can change the skin , you can choose the number , icon , text , message , statistics can be any search engine keywords . Ride the wind multi-user PHP statistics system...

SQL injection vulnerability in the front-end ge***_aj***_co***.php file of Dascommerce B2B2C Multi-User Mall system

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. A SQL injection vulnerability exists in the front-end geajco.php file of the B2B2C multi-user mall system of Da Shangchuang. An attacker can exploit the...

SQL Injection Vulnerability in Ride the Wind Multi-User PHP Statistics System vi***.php Page

Ride Multi-User PHP Statistics System supports multi-user applications, as well as website and online store statistics. A SQL injection vulnerability exists in the vi.php page of Ridewind Multi-User PHP Statistics System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in B2B2C Multi-User Mall System of Shanghai Shangchuang Network Technology Co.

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. There is a SQL injection vulnerability in the B2B2C Multi-User Mall system of Shanghai Shangchuang Networks Technology Co...

[SECURITY] Fedora 31 Update: community-mysql-8.0.18-4.fc31

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

[SECURITY] Fedora 30 Update: community-mysql-8.0.18-4.fc30

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...