:: Deepquest ::

FLEX 1085 Web 1.6.0 – HTML Injection

Bus Pass Management System 1.0 – ‘Search’ SQL injection

Webrun 3.6.0.42 – ‘P_0’ SQL Injection

Linux Kernel 5.1.x – ‘PTRACE_TRACEME’ pkexec Local Privilege Escalation (2)

WordPress Plugin WP Guppy 1.1 – WP-JSON API Sensitive Information Disclosure

GNU gdbserver 9.2 – Remote Command Execution (RCE)

Aimeos Laravel ecommerce platform 2021.10 LTS – ‘sort’ SQL injection

Modbus Slave 7.3.1 – Buffer Overflow (DoS)

Pinkie 2.15 – TFTP Remote Buffer Overflow (PoC)

This Metasploit module exploits an unauthenticated command injection vulnerability within the Nimbus service component of Apache Storm. The getTopologyHistory RPC method method takes a single argument which is the name of a user which is concatenated into a string that is executed by bash. In order for the vulnerability to be exploitable, there must have […]