Offensive Security
|
4f2cf56b31
|
DB: 2021-10-23
11 changes to exploits/shellcodes
Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection
OpenSIS 8.0 'modname' - Directory Traversal
Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload
Budget and Expense Tracker System 1.0 - Arbitrary File Upload
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Hidden Backdoor Account (Write Access)
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Remote Privilege Escalation
WordPress Plugin Redirect 404 to Parent 1.3.0 - Reflected Cross-Site Scripting
Jetty 9.4.37.v20210219 - Information Disclosure
Clinic Management System 1.0 - SQL injection to Remote Code Execution
Online Course Registration 1.0 - Blind Boolean-Based SQL Injection (Authenticated)
Windows/x64 - Reverse TCP (192.168.201.11:4444) Shellcode (330 Bytes)
|
2021-10-23 05:02:09 +00:00 |
|
Offensive Security
|
679a62755b
|
DB: 2021-10-14
28 changes to exploits/shellcodes
Cypress Solutions CTM-200/CTM-ONE - Hard-coded Credentials Remote Root (Telnet/SSH)
Cypress Solutions CTM-200 2.7.1 - Root Remote OS Command Injection
Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution
Ahsay Backup 8.1.1.50 - Insecure File Upload and Code Execution (Authenticated)
Simple Payroll System 1.0 - SQLi Authentication Bypass
Dolibarr ERP/CRM 14.0.1 - Privilege Escalation
Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload & Remote Code Execution (RCE)
Budget and Expense Tracker System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Budget and Expense Tracker System 1.0 - Arbitrary File Upload
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Hidden Backdoor Account (Write Access)
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Remote Privilege Escalation
Company's Recruitment Management System 1.0 - 'Multiple' SQL Injection (Unauthenticated)
Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated)
Apache HTTP Server 2.4.50 - Path Traversal & Remote Code Execution (RCE)
Pharmacy Point of Sale System 1.0 - 'Add New User' Cross-Site Request Forgery (CSRF)
Online Learning System 2.0 - 'Multiple' SQLi Authentication Bypass
Simple Issue Tracker System 1.0 - SQLi Authentication Bypass
Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting (XSS)
Logitech Media Server 8.2.0 - 'Title' Cross-Site Scripting (XSS)
Sonicwall SonicOS 7.0 - Host Header Injection
Windows/x64 - Reverse TCP (192.168.201.11:4444) Shellcode (330 Bytes)
|
2021-10-14 05:02:11 +00:00 |
|
Offensive Security
|
8f90c99e8c
|
DB: 2021-09-07
8 changes to exploits/shellcodes
SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service
Argus Surveillance DVR 4.0 - Unquoted Service Path
OpenEMR 6.0.0 - 'noteid' Insecure Direct Object Reference (IDOR)
FlatCore CMS 2.0.7 - Remote Code Execution (RCE) (Authenticated)
Bus Pass Management System 1.0 - 'viewid' Insecure direct object references (IDOR)
Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload & Remote Code Execution (RCE)
Patient Appointment Scheduler System 1.0 - Persistent/Stored XSS
Antminer Monitor 0.5.0 - Authentication Bypass
|
2021-09-07 05:02:00 +00:00 |
|