EUVD-2018-8091

Malware in sbrugna...

fileGPS - A Tool That Help You To Guess How Your Shell Was Renamed After The Server-Side Script Of The File Uploader Saved It

Introduction When you upload a shell on a web-server using a file upload functionality, usually the file get renamed in various ways in order to prevent direct access to the file, RCE and file overwrite. fileGPS is a tool that uses various techniques to find the new filename, after the server-sid...

PT-2018-13452

Name of the Vulnerable Software and Affected Versions damiCMS version 6.0.1 Description An issue was discovered where the software relies on the PHP time function for cookies. This makes it possible to determine the cookie for an existing admin session via a certain number of guesses...

CVE-2018-16239: Use of Insufficiently Random Values

An issue was discovered in damiCMS V6.0.1. It relies on the PHP time function for cookies, which makes it possible to determine the cookie for an existing admin session via 10800 guesses...