ConnectWise Automate SQL Injection Vulnerability

ConnectWise Automate is a cloud-based, local IT automation solution from ConnectWise USA. The product supports content management, file sharing, IT asset tracking and management, and more. A SQL injection vulnerability exists in Connectwise Automate versions prior to 2020.7 and prior to 2019.12...

FHEM 6.0 - Local File Inclusion

FHEM version 6.0 suffers from a local file inclusion vulnerability. Exploit Title: FHEM 6.0 - Local File Inclusion Date: 2020-02-10 Exploit Author: Emre ÖVÜNÇ Vendor Homepage: https://fhem.de/ Software Link: https://fhem.de/Download Version: v6.0 Tested on: Windows Link:...

CVE-2020-9069

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than...

Exploit for CVE-2020-1015

CVE-2020-1015 PoC for CVE-2020-1015 More detail available he...

Denial of Service Vulnerability in WPS Office 2019 Professional Edition of Zhuhai Kingsoft Office Software Co Ltd (CNVD-2020-30430)

Kingsoft WPS is office software from Kingsoft Office Software. A denial-of-service vulnerability exists in WPS Office 2019 Professional Edition by Zhuhai Kingsoft Office Software Ltd. that can be exploited by attackers to cause a denial of service...

NETGEAR R8500 and R8300 Buffer Overflow Vulnerability (CNVD-2021-46350)

The NETGEAR R8500 and NETGEAR R8300 are both wireless routers from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR R8300 prior to version 1.0.2.104 and the R8500 prior to version 1.0.2.104. The vulnerability originates when a network system or product performs an operation on memor...

Hackers exploit vulnerability to leak The Last of Us 2 spoiler video

By Deeba Ahmed Last week, it was reported that someone leaked The Last of Us Part 2 story spoilers online. Now Sony knows who... This is a post from HackRead.com Read the original post: Hackers exploit vulnerability to leak The Last of Us 2 spoiler video...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-46562)

NETGEAR D3600 and others are products of NETGEAR, Inc.NETGEAR D3600 is a wireless modem.NETGEAR D6100 is a wireless modem.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless...

IBM QRadar SIEM Command Execution Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A command executio...

IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2020-23044)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An information...

What’s a 10? Pwning vCenter with CVE-2020-3952

...

The vulnerability of the HTTP/2 module of the Apache Traffic Server allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to improper handling of HTTP/2 requests. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

Denial of Service Vulnerability in ForceControl at Beijing ForceControl YuanTong Technology Co.

ForceControl universal monitoring configuration software ForceControl is a general-purpose man-machine visualization monitoring configuration software, is the first domestic automation software products with distributed real-time database technology as the kernel. Ltd. ForceControl has a denial o...

Horde Groupware Webmail Edition 5.2.22 - PHAR Loading

Horde Groupware Webmail Edition 5.2.22 - PHAR Loading exploit-phar-loading.py !/usr/bin/env python3 from horde import Horde import requests import subprocess import sys TEMPDIR = '/tmp' WWWROOT = '/var/www/html' if lensys.argv ' sys.exit1 baseurl = sys.argv1 username = sys.argv2 password =...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796-PoC winners! Daniel García Gutiérrez @dan...

CVE-2019-7589 Kantech EntraPass Improper Input Validation

A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraPass Corporate Edition versions 8.0 and...

Progress Software MOVEit Transfer SQL Injection Vulnerability (CNVD-2020-19007)

Progress Software MOVEit Transfer is a suite of file transfer software from Progress Software, USA. A SQL injection vulnerability in the REST API in Progress Software MOVEit Transfer version 2019.1 before 2019.1.4 and version 2019.2 before 2019.2.1 can be exploited by an attacker to access the...

CVE-2019-15977

creationtimestamp| type| source ---|---|--- 2020-02-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48020 2024-03-19 15:16:48+00:00| seen| https://t.me/ctinow/211577...

CVE-2020-8597 rhostname buffer overflow in pppd

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions. Recent assessments: wvu-r7 at March 10, 2020 6:33pm UTC reported: AFAIK, it is common to enable full mitigations on the binary, with ASLR enabled on the system. While this doesn’...

CVE-2020-0638

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'...