Month: August 2019

[local] Ghidra (Linux) 9.0.4 – .gar Arbitrary Code Execution

[remote] Webmin 1.920 – Unauthenticated Remote Code Execution (Metasploit)

[remote] ManageEngine OpManager 12.4x – Unauthenticated Remote Command Execution (Metasploit)

[remote] ManageEngine OpManager 12.4x – Privilege Escalation / Remote Command Execution (Metasploit)

[remote] ManageEngine Application Manager 14.2 – Privilege Escalation / Remote Command Execution (Metasploit)

[webapps] osTicket 1.12 – Formula Injection

[webapps] osTicket 1.12 – Persistent Cross-Site Scripting

[webapps] Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 – 'ticket.php' Arbitrary File Deletion

[webapps] osTicket 1.12 – Persistent Cross-Site Scripting via File Upload

[webapps] Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 – 'ticketreply.php' SQL Injection