>> ARCHIVE: 2019-12

Dokuwiki version 2018-04-22b suffers from a username enumeration vulnerability.

Microsoft Visual Studio 2008 Express IDE suffers from an XML external entity injection vulnerability.

This Metasploit module exploits a command injection in Ajenti version 2.1.31. By injecting a command into the username POST parameter to api/core/auth, a shell can be spawned.

This archive contains all of the 180 exploits added to Packet Storm in November, 2019.

SALTO ProAccess SPACE versions 5.5 and below suffer from path traversal, arbitrary file write, persistent cross site scripting, privilege escalation, and clear text transmission of sensitive data vulnerabilities.