CVE-2021-33469

CVE-2021-33469 affects COVID19 Testing Management System 1.0 with a cross-site scripting (XSS) flaw exploitable via the Admin name parameter. Multiple connected sources corroborate the issue across NVD/Red Hat/NVD and third-party feeds, consistently describing XSS in version 1.0. Root cause detai...

What Is The High Orbit Ion Cannon (HOIC)❓ Defend methods

High Orbit Ion Cannon HOIC is a platform that offers open-source network stress testing features. Used by people with the intend of attacking a server. With the application, you’ll be able to carry out denial of service DoS and distributed denial of service DDoS attacks. The primary purpose of...

PT-2021-20141 · Unknown · Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: COVID19 Testing Management System version 1.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the Admin name parameter. Recommendations: For COVID19 Testing Management System version 1.0,...

CVE-2021-33469: Improper Neutralization of Input During Web Page Generation

COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting XSS via the "Admin name" parameter...

COVID19 Testing Management System Cross-site Scripting Vulnerability

COVID19 Testing Management System is a COVID19 Testing Management System. A cross-site scripting vulnerability exists in COVID19 Testing Management System version 1.0, which can be exploited via the Admin name parameter...

COVID19 Testing Management System SQL Injection Vulnerability

COVID19 Testing Management System is a COVID19 Testing Management System. A SQL injection vulnerability exists in COVID19 Testing Management System version 1.0, which is exploited via the admin panel...

CVE-2021-33470: Improper Neutralization of Special Elements used in an SQL Command

COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel...

Solr-GRAB - Steal Apache Solr Instance Queries With Or Without A Username And Password

Steal Apache Solr instance Queries with or without a username and password. DISCLAIMER : This project should be used for authorized testing and educational purposes only. Download git clone https://github.com/GnosticPlayers/Solr-GRAB Usage You can search for Apache Solr Instances via Censys, with...

Intel ADAS IE Software Privilege Escalation

The vulnerability of Intel ADAS IE software for autonomous driving exists due to insufficient testing of input data. Exploiting this vulnerability can allow hackers to gain increased privileges...

AutoPentest-DRL - Automated Penetration Testing Using Deep Reinforcement Learning

AutoPentest-DRL is an automated penetration testing framework based on Deep Reinforcement Learning DRL techniques. The framework determines the most appropriate attack path for a given network, and can be used to execute a simulated attack on that network via penetration testing tools, such as...

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments, referred to as 'Vulhub'. It is not a specific exploit or tool, but rather a collection of vulnerable environments for testing and learning purposes. The repository contains various vulnerable docker...

jexboss

Exploit module/targeting JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. The provided code is a Python script that appears to be a tool for testing and exploiting vulnerabilities in JBoss Application Server and other Java-based platforms. The script is written i...

Spotweb-Develop 1.4.9 Cross Site Scripting

Exploit Title: Cross Site Scripting DOM Based spotweb-develop 1.4.9 Author: @nu11secur1ty Testing and Debugging: nu11secur1ty $ OWASP-ZAP Date: 05.20.2021 Vendor: https://www.nzbserver.com/ Link: https://github.com/spotweb/spotweb CVE: 2021-XXXX Proof: https://streamable.com/hix5o1 + Exploit...

OPENSUSE-SU-2021:0752-1 Security update for jhead

This update for jhead fixes the following issues: jhead was updated to 3.06.0.1 lot of fuzztest fixes Apply a whole bunch of patches from Debian. Spell check and fuzz test stuff from Debian, nothing useful to human users. Add option to set exif date from date from another file. Bug fixes relating...

Pega Infinity patches authentication vulnerability

Security researchers came across a Pega Infinity vulnerability through participation in Apple’s bug bounty program, after focusing on vendors that supplied technology to Apple. By using Burp Suite—an integrated platform for performing security testing of web applications—the security researchers...

Outside In Filters Component Information Disclosure

The vulnerability of the Outside In Filters component within Oracle’s SDK for software development tools exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to gain access to data through HTTP requests...

Outside In Filters Component Privilege Escalation

The vulnerability of the Outside In Filters component within Oracle’s software development kit SDK “Outside In Technology” exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to gain read access to data, modify, add, or delete data, or cause a...

Firefox Security Restriction Unauthorized Access

The vulnerability of Firefox browsers is related to errors in security restrictions on testing infrastructure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting (XSS)

Exploit Title: COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting XSS Date: 19/05/2021 Exploit Author: Rohit Burke Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/ Version: 1.0 Tested on:...

COVID19 Testing Management System 1.0 - (Admin name) Cross-Site Scripting Vulnerability

Exploit Title: COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting XSS Exploit Author: Rohit Burke Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/ Version: 1.0 Tested on: Windows 10 == Store...