12021 matches found
Exponent CMS 2.6 - Multiple Vulnerabilities
Exploit Title: Exponent CMS 2.6 - Multiple Vulnerabilities Exploit Author: heinjame Date: 22/10/2021 Exploit Author: picaroo Vendor Homepage: https://www.exponentcms.org/ Version: http://127.0.0.1:8082/expcms/text/edit/id/id/src/@footer Title, Text Block Payload = " Database credential are...
GSD-2021-1002608 iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda
iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit...
Zoom Client server-side request forgery vulnerability
Zoom Client is a multi-platform video conferencing client application from Zoom, Inc. A server-side request forgery vulnerability exists in Zoom Client for Meetings prior to version 5.7.3, which stems from the product's failure to properly validate user input and could be exploited by attackers t...
WordPress link-list-manager plugin cross-site scripting vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. link-list-manager plugin is a WordPress open source application plugin. WordPress link-list-manager plugin has a...
JT Utilities and JTTK File Parsing Vulnerability (CNVD-2021-101002)
JT is a publicly released data format developed by Siemens Digital Industry Software.JT Open Toolkit also known as JTTK is developer-oriented application programming interface API JT-enabled software.JT Open Toolkit is a read and write toolkit.JT Utilities and JTTK file parsing vulnerabilities. A...
Exploit for CVE-2021-34527
C...
Bentley View Resource Management Error Vulnerability
Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to a resource management error that is caused by a use-after-release vulnerability when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Spring Boot Log4j - CVE-2021-44228 The Log4Shell vulnerabilit...
Wordpress Catch Themes Demo Import 1.6.1 Plugin- Remote Code Execution Exploit
Exploit Title: Wordpress Plugin Catch Themes Demo Import 1.6.1 - Remote Code Execution RCE Authenticated Exploit Author: Ron Jost Hacker5preme Vendor Homepage: https://wordpress.org/plugins/catch-themes-demo-import/ Software Link:...
Cross-site Scripting (XSS) - Reflected in gnuboard/gnuboard5
Description The reflected XSS vulnerability occurs to a flaw in the cleanxsstags function called in memo.php of Gnuboard 5. This cleanxsstags is a Sanitizer that removes XSS-vulnerable tags and attributes. However, it can bypass Sanitizer by using a newline character. %0A, %0D, ETC Proof of Conce...
Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Zulip
CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth All credi...
D-Link DSL-3782 Pre-Authentication Remote Root
!/usr/bin/python2 preauth rece for dlink dsl-3782 found: 06.11.2021 pwned: 18.112021 @ 19:26 import sys import urllib2 requests import urllib import struct target = 'http://192.168.0.50/index.php' cgi-bin/ChgLang.asp' nopsled = "" NOP sled XOR $t0, $t0, $t0; as NOP is only null bytes for i in...
secure.action.news Cross Site Scripting vulnerability OBB-2282566
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2015-9083
CVE-2015-9083 entry is rejected and not used; not an active vulnerability.
Internet Bug Bounty: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.50
Hello Apache team, @fms and myself were able to bypass the latest patch for CVE 2021-41773 in the Apache 2.4.50. These are the payloads: 1 %%32%65%%32%65 2 .%%32%65 3 .%%32e 4 .%2%65 PoC Path Traversal GET /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd HTTP/1.1...