Clinic Pro version 4 suffers from a remote SQL injection vulnerability.
>> ARCHIVE: 2019-04
Clinic Pro version 4 suffers from a remote SQL injection vulnerability.
This Metasploit module exploits a command injection vulnerability in TeemIp versions prior to 2.4.0. The “new_config” parameter of “exec.php” allows you to create a new PHP file with the exception…
Apache versions 2.4.17 through 2.4.38 suffer from a local root privilege escalation vulnerability due to an out-of-bounds array access leading to an arbitrary function call.
Chrome version 73.0.3683.86 stable exploit for chromium issue 941743, tested on Windows 10 x64, which leverages a flaw in the V8 javascript engine.
WordPress 5.0.0 – Crop-image Shell Upload (Metasploit)
WordPress Plugin Contact Form Maker 1.13.1 – Cross-Site Request Forgery
AIDA64 Extreme 5.99.4900 – ‘Logging’ SEH Buffer Overflow
Manage Engine ServiceDesk Plus 9.3 – Privilege Escalation
FreeSMS 2.1.2 – SQL Injection (Authentication Bypass)
AIDA64 Engineer 5.99.4900 – ‘Load from file’ Field Buffer Overflow (SEH)