>> ARCHIVE: 2020-06

College-Management-System-Php version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Code Blocks version 17.12 File Name SEH unicode local buffer overflow exploit.

OpenCTI version 3.3.1 suffers from cross site scripting and directory traversal vulnerabilities.

This Metasploit module exploits an authenticated remote code execution vulnerability in Cayin CMS versions 11.0 and below. The code execution is executed in the system_service.cgi file’s ntpIp Parameter. The field…

This Metasploit module exploits a remote SQL injection vulnerability in the “query” parameter found on Gila CMS version 1.1.18.1.

This Metasploit module exploits an unauthenticated remote SQL injection vulnerability in Cayin xPost versions 2.5 and below. The wayfinder_meeting_input.jsp file’s wayfinder_seqid parameter can be injected blindly. Since this app bundles…

This Metasploit module exploits a command injection vulnerability within the Agent Tesla control panel, in combination with an SQL injection vulnerability and a PHP object injection vulnerability, to gain remote…