org.eclipse.jetty.aggregate:jetty-all (7.0.0.m3), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.m3) +15 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.0.0.m3)

org.eclipse.jetty:jetty-webapp MAVEN version 7.0.0.m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.m3 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (11.0.0.beta1), org.eclipse.jetty.demos:demo-async-rest-server (11.0.0.beta2) +21 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (>=11.0.0.beta1, <=11.0.0.beta2)

org.eclipse.jetty:jetty-webapp MAVEN version =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta2 and more Source cves: CVE-2020-27216 Source advisory:...

org.mortbay.jetty.example:jetty-embedded (7.0.0.pre4), org.mortbay.jetty:jetty-annotations (7.0.0.pre4) +12 more potentially affected by CVE-2020-27216 via org.mortbay.jetty:jetty-webapp (7.0.0.pre4)

org.mortbay.jetty:jetty-webapp MAVEN version 7.0.0.pre4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mortbay.jetty:jetty-webapp and may be impacted: - org.mortbay.jetty.example:jetty-embedded 7.0.0.pre4 - org.mortbay.jetty:jetty-annotations...

org.eclipse.jetty.aggregate:jetty-all (7.1.3.v20100526), org.eclipse.jetty.aggregate:jetty-all-server (7.1.3.v20100526) +20 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.1.3.v20100526)

org.eclipse.jetty:jetty-webapp MAVEN version 7.1.3.v20100526 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.3.v20100526 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc1) +12 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.0.0.rc1)

org.eclipse.jetty:jetty-webapp MAVEN version 7.0.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

nz.net.osnz.composite:composite-jetty (3.14), org.eclipse.jetty.aggregate:jetty-all (10.0.0.beta1) +22 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (>=10.0.0.beta1, <=10.0.0.beta2)

org.eclipse.jetty:jetty-webapp MAVEN version =10.0.0.beta1, =10.0.0.beta1, =10.0.0.beta1, =10.0.0.beta1, =10.0.0.beta1, =10.0.0.beta1, =10.0.0.beta1, =10.0.0.beta1, =10.0.0.beta1, =10.0.0.beta1, =10.0.0.beta2 and more Source cves: CVE-2020-27216 Source advisory: MEND:CVE-2020-27216...

org.eclipse.jetty.aggregate:jetty-all (11.0.0.beta1), org.eclipse.jetty.demos:demo-async-rest-server (11.0.0.beta2) +21 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (>=11.0.0.beta1, <=11.0.0.beta2)

org.eclipse.jetty:jetty-webapp MAVEN version =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta1, =11.0.0.beta2 and more Source cves: CVE-2020-27216 Source advisory: MEND:CVE-2020-27216...

Typesetter CMS 5.1 Remote Code Execution

Exploit Title: Typesetter CMS 5.1 - Arbitrary Code Execution Exploit Author: Rodolfo "t0gu" Tavares Contact: @t0guu TW Software Homepage: https://www.typesettercms.com/ Version : 5.1 Tested on: Linux / Apache Category: WebApp Google Dork: intext:"Powered by Typesetter" Date: 2020-09-29 CVE :...

Typesetter CMS 5.1 - Arbitrary Code Execution (Authenticated)

Exploit Title: Typesetter CMS 5.1 - Arbitrary Code Execution Exploit Author: Rodolfo "t0gu" Tavares Contact: @t0guu TW Software Homepage: https://www.typesettercms.com/ Version : 5.1 Tested on: Linux / Apache Category: WebApp Google Dork: intext:"Powered by Typesetter" Date: 2020-09-29 CVE :...

Textpattern CMS 4.6.2 - Cross-site Request Forgery

Exploit Title: Textpattern CMS 4.6.2 - Cross-site Request Forgery Exploit Author: Alperen Ergel Contact: @alprenae Software Homepage: https://textpattern.com/ Version : 4.6.2 Tested on: windows 10 / xammp Category: WebApp Google Dork: intext:"Published with Textpattern CMS" Date: 2020-10-29...

Liman 0.7 - Cross-Site Request Forgery (Change Password)

Exploit Title: Liman 0.7 - Cross-Site Request Forgery Change Password Date: 2020-10-07 Exploit Author: George Tsimpidas Software Link : https://github.com/salihciftci/liman/releases/tag/v0.7 Version: 0.7 Tested on: Ubuntu 18.04.5 LTS Bionic Beaver Category: Webapp Description: There is no CSRF...

Seat Reservation System 1.0 Cross Site Scripting

Exploit Title: Seat Reservation System 1.0 Persistent Cross-Site Scripting Date: 10-08-2020 Exploit Author: George Tsimpidas Vendor Homepage: www.sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/seat-reservation-system-using-php0.zip Version:...

Textpattern CMS 4.6.2 Cross Site Scripting

Exploit Title: Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting Exploit Author: Alperen Ergel Web Site: https://alperenae.gitbook.io/ Software Homepage: https://textpattern.com/ Version : 4.6.2 Tested on: windows 10 / xammp Category: WebApp Google Dork: intext:"Published with...

Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting

Exploit Title: Textpattern CMS 4.6.2 - 'body' Persistent Cross-Site Scripting Exploit Author: Alperen Ergel Web Site: https://alperenae.gitbook.io/ Software Homepage: https://textpattern.com/ Version : 4.6.2 Tested on: windows 10 / xammp Category: WebApp Google Dork: intext:"Published with...

Information Disclosure

tapestry-core is vulnerable to information disclosure. Mishandling of URL allows an attacker to use malicious URL to list and download the JAVA webapp files from WEB-INF of the WAR being run...

Typesetter CMS 5.1 Cross Site Scripting

Exploit Title: Typesetter CMS 5.1 - 'Site Title' Persistent Cross-Site Scripting Exploit Author: Alperen Ergel Web Site: https://alperenae.gitbook.io/ Contact: @alperenae IG @alprenae TW Software Homepage: https://www.typesettercms.com/ Version : 5.1 Tested on: windows 10 / xammp Category: WebApp...

Typesetter CMS 5.1 - 'Site Title' Persistent Cross-Site Scripting

Exploit Title: Typesetter CMS 5.1 - 'Site Title' Persistent Cross-Site Scripting Exploit Author: Alperen Ergel Web Site: https://alperenae.gitbook.io/ Contact: @alperenae IG @alprenae TW Software Homepage: https://www.typesettercms.com/ Version : 5.1 Tested on: windows 10 / xammp Category: WebApp...

addressbook 9.0.0.1 SQL Injection

Title: addressbook 9.0.0.1 - 'id' SQL Injection Date: 2020-04-01 Author: David Velazquez a.k.a. d4sh&r000 vulnerable application: https://sourceforge.net/projects/php-addressbook/files/latest/download vulnerable version: 9.0.0.1 Discription: addressbook 9.0.0.1 time-based blind SQL injection Test...

Pinger 1.0 - Remote Code Execution Exploit

Exploit for php platform in category web applications Title: Pinger 1.0 - Remote Code Execution Author: Milad Karimi Vendor Homepage: https://github.com/wcchandler/pinger Software Link: https://github.com/wcchandler/pinger Tested on: windows 10 , firefox Version: 1.0 CVE : N/A...

Pinger 1.0 - Remote Code Execution

Title: Pinger 1.0 - Remote Code Execution Date: 2020-04-13 Author: Milad Karimi Vendor Homepage: https://github.com/wcchandler/pinger Software Link: https://github.com/wcchandler/pinger Tested on: windows 10 , firefox Version: 1.0 CVE : N/A...