Subscribe via feed.
Archive for October, 2021

VMware vCenter Server Analytics (CEIP) Service File Upload

Posted by deepcore under exploit (No Respond)

This Metasploit module exploits a file upload in VMware vCenter Server’s analytics/telemetry (CEIP) service to write a system crontab and execute shell commands as the root user. Note that CEIP must be enabled for the target to be exploitable by this module. CEIP is enabled by default.

[webapps] Online Employees Work From Home Attendance System 1.0 – SQLi Authentication Bypass

Posted by deepcore under Security (No Respond)

Online Employees Work From Home Attendance System 1.0 – SQLi Authentication Bypass

Tags: ,

[webapps] Online Enrollment Management System 1.0 – Authentication Bypass

Posted by deepcore under Security (No Respond)

Online Enrollment Management System 1.0 – Authentication Bypass

Tags: ,

[webapps] Simple Online College Entrance Exam System 1.0 – Account Takeover

Posted by deepcore under Security (No Respond)

Simple Online College Entrance Exam System 1.0 – Account Takeover

Tags: ,

[webapps] Simple Online College Entrance Exam System 1.0 – Unauthenticated Admin Creation

Posted by deepcore under Security (No Respond)

Simple Online College Entrance Exam System 1.0 – Unauthenticated Admin Creation

Tags: ,

[webapps] WordPress Plugin Pie Register 3.7.1.4 – Admin Privilege Escalation (Unauthenticated)

Posted by deepcore under Security (No Respond)

WordPress Plugin Pie Register 3.7.1.4 – Admin Privilege Escalation (Unauthenticated)

Tags: ,

[webapps] django-unicorn 0.35.3 – Stored Cross-Site Scripting (XSS)

Posted by deepcore under Security (No Respond)

django-unicorn 0.35.3 – Stored Cross-Site Scripting (XSS)

Tags: ,

[webapps] Maian-Cart 3.8 – Remote Code Execution (RCE) (Unauthenticated)

Posted by deepcore under Security (No Respond)

Maian-Cart 3.8 – Remote Code Execution (RCE) (Unauthenticated)

Tags: ,

[webapps] IFSC Code Finder Project 1.0 – SQL injection (Unauthenticated)

Posted by deepcore under Security (No Respond)

IFSC Code Finder Project 1.0 – SQL injection (Unauthenticated)

Tags: ,

[webapps] Online Traffic Offense Management System 1.0 – Privilage escalation (Unauthenticated)

Posted by deepcore under Security (No Respond)

Online Traffic Offense Management System 1.0 – Privilage escalation (Unauthenticated)

Tags: ,