google.com.ar

Pentest notes for: google.com.ar Exploit Pack Nmap 7.80 scan initiated Fri Sep 13 16:38:25 2019 as: "C:\Program Files x86\Nmap\nmap.exe" -sV -A -oA log/google.com.ar google.com.ar Nmap scan report for google.com.ar 173.194.222.94 Host is up 0.015s latency. rDNS record for 173.194.222.94:...

File Upload Vulnerability in Harbin Xinzhongxin Electronic Co.

Harbin Xinzhongxin Electronics Co., Ltd. is a domestic campus card system solution provider, business covers intelligent campus, intelligent transportation, intelligent public security, intelligent park and other related fields. A file upload vulnerability exists in the one-card system of Harbin...

CVE-2019-1224 Remote Desktop Protocol Server Information Disclosure Vulnerability

...

Command execution vulnerability in PbootCMS v1.4.1 frontend search page template

PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system, is a set of efficient, simple, strong and free commercial PHP CMS source code. PbootCMSv1.4.1 front-end search page templates have a command execution vulnerability that ca...

Remote Code Execution Vulnerability in Advantech WebAccess

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. A remote code execution vulnerability exists in Advantech WebAccess, which can be exploited by an attacker to obtain server information and privileges...

Code Execution Vulnerability in OpenSNS V5

OpenSNS is a lightweight social user center framework based on OneThink. The system adheres to a minimalist design style and focuses on communication. A code execution vulnerability exists in OpenSNS, which can be exploited by an attacker to obtain server information...

Code Execution Vulnerability in ThinkSNS Backend

Wise Software Beijing Co., Ltd. is committed to the wide application of SNS in various business fields, and strives to become a more comprehensive and professional software products and services provider. A code execution vulnerability exists in the backend of ThinkSNS, which allows an attacker t...

Command Execution Vulnerability in ctcms 2.0.2 Frontend

Ctcms video system Ctcms video system is a PHP + Mysql development of video management system. ctcms2.0.2 front-end command execution vulnerability, an attacker can exploit the vulnerability to execute arbitrary commands to obtain server information...

Starbucks: Information disclosure on sim.starbucks.com

Description: Hi,there.I found the sim.starbucks.com host deployed the jira server which version is 7.9.2,there is many public vulnerability on this low version. Information disclosured vulnerability 1.CVE-2019-3403https://jira.atlassian.com/browse/JRASERVER-69242 visit the URL address,you can che...

TPshopv2.0.0 open source mall system command execution vulnerability

Ltd. is a professional research and development of e-commerce software as the main business of the group of companies, set sales, marketing, product development, technical support, product implementation, after-sales service and many other functions in one of the professional enterprise managemen...

Code Execution Vulnerability in Aiwo Real Estate System v4.7

Sticky Cat is an extremely light, minimalist general-purpose PHP website system. Code execution vulnerability exists in Aiwo Real Estate System v4.7, which can be exploited by attackers to execute arbitrary code and obtain server information...

Code Execution Vulnerability in Aiwo Real Estate System v4.7

Intimate cat imcat is an extremely light, minimalist general-purpose PHP website system. Aiwo Real Estate System v4.7 has a code execution vulnerability that can be exploited by attackers to execute arbitrary code and obtain server information...

DoorGets Sensitive Information Disclosure Vulnerability (CNVD-2019-13791)

DoorGets is a free and open source content management system. A sensitive information disclosure vulnerability exists in /fileman/php/movefile.php in doorGets 7.0. A remote, unauthenticated attacker can exploit this vulnerability to obtain sensitive information about the server or make the server...

CVE-2019-11606

doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information...

CVE-2019-11610

doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information...

Command Execution Vulnerability in LaySNS_2.2.0

Lightweight content community system Laysns using Think + Layui as the technical basis for development, using the OOP approach to the basic operation of the framework to build. LaySNS2.2.0 has a command execution vulnerability that can be exploited by an attacker to execute commands and obtain...

Unikrn: Path Disclosure Vulnerability http://crm.******.com

Hello, there is a path discovery on the server. https://crm.unikrn.com/plugins/MauticZapierBundle/MauticZapierBundle.php https://crm.unikrn.com/plugins/MauticCloudStorageBundle/MauticCloudStorageBundle.php and other scripts at https://crm.unikrn.com/plugins//.php . As an option to eliminate the...

CVE-2018-17562

Multi-Tech FaxFinder before 5.1.6 has SQL Injection via a status/calldetails?oid= URI, allowing an attacker to extract the underlying database schema to further disclose other fax server information through different injection points...

Arbitrary File Read Vulnerability in phpyun v4.6

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. phpyun v4.6 exists arbitrary file reading vulnerability. An attacker can exploit the vulnerability to read arbitrary files and obtain sensitive serve...

Webmeup BLEXBot Web Indexing Tool

BLEXBot scanning tool is designed to gather information from servers. Such scans might indicate an attempt to disclose sensitive information. Remote attackers can use those security scanners to detect vulnerabilities on a target server...