File upload vulnerability in MCMS backend up***.do page

MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS backend up.do page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File upload vulnerability in MCMS frontend up***.do page

MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS frontend up.do page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Vehicle Parking Management System 1.0 SQL Injection Vulnerability

Vehicle Parking Management System version 1.0 suffer from multiple remote SQL Injection vulnerabilities, one of which allows for authentication bypass. Exploit Title: Vehicle Parking Management System 1.0 - Authentication Bypass Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 |...

Arbitrary File Upload Vulnerability in Heartland OA Network Intelligent Office System

Heartland OA Network Intelligent Office System is a multi-functional intelligent office application software. An arbitrary file upload vulnerability exists in the HeartStone OA Network Intelligent Office System. An attacker can exploit the vulnerability to upload a webshell and gain server...

RiteCMS 2.2.1 - Remote Code Execution

Exploit Title: RiteCMS 2.2.1 - Remote Code Execution Date: 2020-07-03 Exploit Author: Enes Özeser Vendor Homepage: http://ritecms.com/ Version: 2.2.1 Tested on: Linux 1- Go to following url. http://CHANGE-THIS/ritecms/cms/ 2- Default username and password is admin:admin. 3- Go "Filemanager" and...

File upload vulnerability exists in Swordfish Forum (CNVD-2020-49099)

Swordfish Forum is a bbs forum system. A file upload vulnerability exists in Swordfish Forum. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File upload vulnerability in MCMS backend wr***.do page

MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS backend wr.do page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Vehicle Parking Management System 1.0 SQL Injection

Exploit Title: Vehicle Parking Management System 1.0 - Authentication Bypass Date: 2020-07-16 Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage: https://phpgurukul.com/vehicle-parking-management-system-using-php-and-mysql/ Software...

File Upload Vulnerability in MCMS Backend

MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS backend. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Teachers Record Management System 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Teachers Record Management System 1.0 - 'searchteacher' SQL Injection Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...

Cyber Cafe Management System SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Cyber Cafe Management System - Authentication Bypass Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...

Teachers Record Management System 1.0 SQL Injection

Exploit Title: Teachers Record Management System 1.0 - 'searchteacher' SQL Injection Date: 2020-07-14 Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage: https://phpgurukul.com/teachers-record-management-system-using-php-and-mysql/...

Client Management System 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Client Management System 1.0 - 'searchdata' SQL Injection Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...

Client Management System 1.0 SQL Injection

Exploit Title: Client Management System 1.0 - 'searchdata' SQL Injection Date: 2020-07-14 Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage: https://phpgurukul.com/client-management-system-using-php-mysql/ Software Link:...

RiteCMS 2.2.1 Remote Code Execution

Exploit Title: RiteCMS 2.2.1 - Authenticated Remote Code Execution Date: 2020-07-03 Exploit Author: Enes Özeser Vendor Homepage: http://ritecms.com/ Version: 2.2.1 Tested on: Linux 1- Go to following url. http://HOST/cms/ 2- Default username and password is admin:admin. We must know login...

Publicly Available Tools Seen in Cyber Incidents Worldwide

Summary This report is a collaborative research effort by the cyber security authorities of five nations: Australia, Canada, New Zealand, the United Kingdom, and the United States.12345 In it we highlight the use of five publicly available tools, which have been used for malicious purposes in...

File Upload Vulnerability in SDCMS

Times Web Information Management System abbreviation: SDCMS is a portal system developed with asp+access. A file upload vulnerability exists in SDCMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in UFIDA NC Cloud

UFIDA NC Cloud is a digital cloud platform for large enterprises, serving large enterprises in business innovation, management change and digital transformation. A file upload vulnerability exists in UFIDA NC Cloud. An attacker can exploit the vulnerability to upload a webshell and gain server...

Arbitrary File Upload Vulnerability in Central Rong Technology Development Group Limited's Website Building System

Ltd. is an IT industry solutions and technical services provider, covering mobile application software development, system software development, artificial intelligence, big data and so on, a comprehensive large-scale technical services company. There is an arbitrary file upload vulnerability in...

Gila CMS 1.11.8 CVE-2020-5515 - SQL Injection

CVE-2020-5515 Gila CMS version 1.11.8 suffers from a remote SQL injection vulnerability. Exploit Title: Gila CMS 1.11.8 - 'query' SQL Injection Date: 2020-06-15 Exploit Author: Carlos Ramírez L. BillyV4 Vendor Homepage: https://gilacms.com/ Software Link:...