Exploit for OS Command Injection in Php

CVE-2024-4577 A Proof of Concept developed by @watchTowrhtt...

Exploit for OS Command Injection in Php

Orange Tsi 🍊 This vulnerability was found by Orange Tsai @oran...

Exploit for OS Command Injection in Php

Orange Tsi 🍊 This vulnerability was found by Orange Tsai @oran...

EC-Orange vulnerable to authorization bypass

Overview EC-Orange provided by S-cubism Inc. is an e-commerce website building system package based on an open source software EC-CUBE. EC-Orange contains an authorization bypass vulnerability CWE-639. This is the same issue as JVN51770585 EC-CUBE vulnerable to authorization bypass. This...

JVN#15637138: EC-Orange vulnerable to authorization bypass

EC-Orange provided by S-cubism Inc. is an e-commerce website building system package based on an open source software EC-CUBE. EC-Orange contains an authorization bypass vulnerability CWE-639. This is the same issue as JVN51770585 EC-CUBE vulnerable to authorization bypass. Impact A user of the...

orangeartgallery.ca Cross Site Scripting vulnerability OBB-3854656

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Orange Spain Faces BGP Traffic Hijack After RIPE Account Hacked by Malware

Mobile network operator Orange Spain suffered an internet outage for several hours on January 3 after a threat actor used administrator credentials captured by means of stealer malware to hijack the border gateway protocol BGP traffic. "The Orange account in the IP network coordination center RIP...

CVE-2023-50429

IzyBat Orange casiers before 202308031 allows getEnsemble.php ensemble SQL injection...

CVE-2023-50429

IzyBat Orange casiers before 202308031 allows getEnsemble.php ensemble SQL injection...

CVE-2023-50429

IzyBat Orange casiers before 202308031 allows getEnsemble.php ensemble SQL injection...

Sql injection

IzyBat Orange casiers before 202308031 allows getEnsemble.php ensemble SQL injection...

CVE-2023-50429

IzyBat Orange casiers before 202308031 allows getEnsemble.php ensemble SQL injection...

CVE-2023-50429

CVE-2023-50429 affects IzyBat Orange casiers prior to 20230803_1. The issue is an ensemble SQL injection in getEnsemble.php ensemble, caused by improper input handling on that endpoint. Reported impact is severe (per CVSS: high confidentiality and integrity impacts, critical overall). Remediation...

IzyBat Orange casiers security breach

IzyBat Orange casiers is a website. A security vulnerability exists in versions prior to IzyBat Orange casiers 202308031, which stems from allowing SQL injection via getEnsemble.php ensemble...

PT-2023-31545 · Unknown · Izybat Orange Casiers

Name of the Vulnerable Software and Affected Versions: IzyBat Orange casiers before 20230803 1 Description: The issue allows SQL injection in the getEnsemble.php ensemble. Recommendations: For IzyBat Orange casiers before 20230803 1, update to a version 20230803 1 or later to resolve the issue. A...

orange-sabou.com Improper Access Control vulnerability OBB-3806537

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Apache Superset - Elevation of Privilege

Overview An attacker with access to the SQL Lab and the abuser and abuserrole tables can elevate his privileges to become administrator. Details On a more general level, diverse tables who are supposed to be only readable can be modified using the WITH … AS and RETURNING keywords. Modification of...

Jorani Remote Code Execution Exploit

This Metasploit module exploits an unauthenticated remote code execution vulnerability in Jorani versions prior to 1.0.2. It abuses log poisoning and redirection bypass via header spoofing and then it uses path traversal to trigger the vulnerability. It has been tested on Jorani 1.0.0. This modul...

INTERPOL Nabs Hacking Crew OPERA1ER's Leader Behind $11 Million Cybercrime

A suspected senior member of a French-speaking hacking crew known as OPERA1ER has been arrested as part of an international law enforcement operation codenamed Nervone, Interpol has announced. "The group is believed to have stolen an estimated USD 11 million -- potentially as much as 30 million -...

Malicious code in react-orange-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13d1f91905a22633d21b8801128e83148b0f22c92c6b63bfb66fb3a7981734d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...