>> ARCHIVE: 2021-10

CMSimple_XH version 1.7.4 remote command execution exploit.

Vehicle Service Management System version 1.0 suffers from a remote shell upload vulnerability.

Exam Form Submission System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Drupal MiniorangeSAML module version 8.x-2.22 suffers from a privilege escalation vulnerability via XML Signature Wrapping.

Phpwcms version 1.9.30 suffers from a cross site scripting vulnerability via the file upload functionality.

Blood Bank System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

WhatsUpGold version 21.0.3 suffers from a persistent cross site scripting vulnerability.

This archive contains all of the 169 exploits added to Packet Storm in September, 2021.

This archive contains all of the 169 exploits added to Packet Storm in September, 2021.

This code is a proof-of-concept of the recently revealed Azure Active Directory password brute-forcing vulnerability announced by Secureworks.