NSClient++ 0.5.2.35 Authenticated Remote Code Execution

Exploit Title: NSClient++ 0.5.2.35 - Authenticated Remote Code Execution Google Dork: N/A Date: 2020-04-20 Exploit Author: kindredsec Vendor Homepage: https://nsclient.org/ Software Link: https://nsclient.org/download/ Version: 0.5.2.35 Tested on: Microsoft Windows 10 Pro x64 CVE: N/A NSClient++ ...

NSClient++ 0.5.2.35 - Authenticated Remote Code Execution

Exploit Title: NSClient++ 0.5.2.35 - Authenticated Remote Code Execution Google Dork: N/A Date: 2020-04-20 Exploit Author: kindredsec Vendor Homepage: https://nsclient.org/ Software Link: https://nsclient.org/download/ Version: 0.5.2.35 Tested on: Microsoft Windows 10 Pro x64 CVE: N/A NSClient++ ...

QRadar Community Edition 7.3.1.6 Cross Site Scripting

------------------------------------------------------------------------ Reflected Cross-Site Scripting in QRadar Forensics link analysis page ------------------------------------------------------------------------ Yorick Koster, September 2019...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-42022)

NETGEAR M4300-28G and others are a managed switch from NETGEAR. A cross-site scripting vulnerability exists in multiple NETGEAR products. The vulnerability stems from the lack of proper validation of client data by the WEB application. An attacker can exploit this vulnerability to execute...

NSClient++ 0.5.2.35 - Authenticated Remote Code Execution Exploit

Exploit for jsp platform in category web applications Exploit Title: NSClient++ 0.5.2.35 - Authenticated Remote Code Execution Exploit Author: kindredsec Vendor Homepage: https://nsclient.org/ Software Link: https://nsclient.org/download/ Version: 0.5.2.35 Tested on: Microsoft Windows 10 Pro x64...

File Upload Vulnerability in YCCMS

YCCMS is a PHP version of a lightweight website building system. YCCMS has a file upload vulnerability that can be exploited by attackers to gain control of the server...

Mahara 19.10.2 Cross Site Scripting

Document Title: =============== Mahara v19.10.2 CMS - Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2217 Release Date: ============= 2020-04-21 Vulnerability Laboratory ID VL-ID: ====================================...

jizhi CMS 1.6.7 - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: jizhi CMS 1.6.7 - Arbitrary File Download Google Dork: jizhicms Exploit Author: iej1ctk1g Vendor Homepage: https://www.jizhicms.cn/ Software Link: http://down.jizhicms.cn/jizhicmsBeta1.6.7.zip Version: 1.6.7 Tested on： Mac OS CV...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2021-59153)

NETGEAR M4300-28G and others are a managed switch from NETGEAR, Inc. A cross-site scripting vulnerability exists in several NETGEAR products. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execu...

U.S. Dept Of Defense: Unrestricted file upload leads to stored xss on https://████████/

Summary: When the user want to upload a "certificate", the web app doesn't check the content-type of the file. A user can upload any kind of file binary,html,... Step-by-step Reproduction Instructions 1. Create an account at https://██████/████████/app/registration/basic-info 2. When you are...

LJCMS suffers from SQL injection vulnerability (CNVD-2020-26976)

LJCMS is a PHP+MYSQL based, free and open source enterprise website system. LJCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Sky File v2.1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== Sky File v2.1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2207 Release Date: ============= 2020-04-20 Vulnerability Laboratory ID VL-ID: ==================================== 2207...

bejoradio.fm Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1147397 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting bejoradio.fm website and...

Centreon Command Injection (CVE-2020-9463)

A command injection vulnerability exists in the Centreon Web Application. Successful attack may result in arbitrary command execution in the context of the server process...

Bundeswehr Karriere - Cross Site Scripting Vulnerability

Document Title: =============== Bundeswehr Karriere - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2214 Video: https://www.vulnerability-lab.com/getcontent.php?id=2197 Release Date: ============= 2020-04-18...

Information_Collection_Handbook

This is a collection of tools and resources for information gathering, specifically for penetration testing and vulnerability assessment. The repository is maintained by Qftm and is available on GitHub. The repository contains a variety of tools and scripts for gathering information about a targe...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-30686)

NETGEAR D3600 and others are products of NETGEAR USA.NETGEAR D3600 is a wireless modem.NETGEAR D6000 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router. A cross-site scripting vulnerability exists in multiple NETGEAR products. The vulnerability stems from th...

NETGEAR WAC510 Cross-Site Scripting Vulnerability (CNVD-2020-27296)

The NETGEAR WAC510 is a wireless access point AP from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR WAC510 prior to version 8.0.1.3, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

NETGEAR WAC510 Cross-Site Scripting Vulnerability

The NETGEAR WAC510 is a wireless access point AP from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR WAC510 prior to version 8.0.1.3, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

Aruba Networks ClearPass Cross-Site Scripting Vulnerability (CNVD-2020-33639)

Aruba Networks ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. A cross-site scripting vulnerability exists in Aruba Networks ClearPass. The vulnerability stems from a lack of proper validation of...