Sifter 11.2
Sifter is a osint, recon, and vulnerability scanner. It combines a plethora of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote...
View ArticleVictor CMS 1.0 Shell Upload
Victor CMS version 1.0 suffers from an authenticated remote shell upload vulnerability. A shell upload vulnerability in this version was originally discovered in May of 2020 by Kishan Lal Choudhary.
View ArticlePandora FMS 7.0 NG 750 SQL Injection
Pandora FMS version 7.0 NG 750 suffers from a remote authenticated SQL injection vulnerability.
View ArticleFaculty Evaluation System 1.0 Cross Site Scripting
Faculty Evaluation System version 1.0 suffers from a persistent cross site scripting vulnerability.
View ArticleRed Hat Security Advisory 2020-5649-01
Red Hat Security Advisory 2020-5649-01 - Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container...
View ArticleRed Hat Security Advisory 2020-5661-01
Red Hat Security Advisory 2020-5661-01 - PostgreSQL is an advanced object-relational database management system. Issues addressed include bypass and improper authorization vulnerabilities.
View ArticleSUPREMO 4.1.3.2348 Privilege Escalation
SUPREMO version 4.1.3.2348 suffers from a privilege escalation vulnerability.
View ArticleRed Hat Security Advisory 2020-5654-01
Red Hat Security Advisory 2020-5654-01 - MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.
View ArticleArtworks Gallery Management System 1.0 SQL Injection
Artworks Gallery Management System version 1.0 suffers from a remote SQL injection vulnerability.
View ArticleRed Hat Security Advisory 2020-5655-01
Red Hat Security Advisory 2020-5655-01 - The MariaDB Native Client library is used to connect applications developed in C/C++ to MariaDB and MySQL databases.
View ArticleAndroid Studio Privilege Escalation
Android Studio has an issue where a malicious project can execute a custom cmd.exe allowing for privilege escalation. Google does not believe this is an issue.
View ArticleRed Hat Security Advisory 2020-5663-01
Red Hat Security Advisory 2020-5663-01 - MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.
View ArticleCSE Bookstore 1.0 SQL Injection
CSE Bookstore version 1.0 suffers from multiple remote SQL injection vulnerabilities. Original discovery of SQL injection in this version is attributed to Alper Basaran in October of 2020.
View ArticleRed Hat Security Advisory 2020-5660-01
Red Hat Security Advisory 2020-5660-01 - The MariaDB Native Client library is used to connect applications developed in C/C++ to MariaDB and MySQL databases.
View ArticleWordPress W3 Total Cache 0.9.3 File Read / Directory Traversal
This Metasploit module exploits an unauthenticated directory traversal vulnerability in WordPress plugin W3 Total Cache version 0.9.2.6 through 0.9.3, allowing arbitrary file read with the web server...
View ArticleRed Hat Security Advisory 2020-5665-01
Red Hat Security Advisory 2020-5665-01 - MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.
View ArticleWebmin 1.962 Remote Command Execution
This Metasploit module exploits an arbitrary command execution vulnerability in Webmin 1.962 and lower versions. Any user authorized to the Package Updates module can execute arbitrary commands with...
View ArticleRed Hat Security Advisory 2020-5662-01
Red Hat Security Advisory 2020-5662-01 - The MariaDB Native Client library is used to connect applications developed in C/C++ to MariaDB and MySQL databases.
View ArticleLibrary Management System 3.0 Cross Site Scripting
Library Management System version 3.0 suffers from a persistent cross site scripting vulnerability.
View Article
