The Ubiquiti UniFi Network Application versions 5.13.29 through 6.5.53 are affected by the Log4Shell vulnerability whereby a JNDI string can be sent to the server via the remember field of a POST request to the /api/login endpoint that will cause the server to connect to the attacker and deserialize a malicious Java object. This results […]
Online Project Time Management System 1.0 – Multiple Stored Cross Site Scripting (XSS) (Authenticated)
Tags: 0day, remote exploitOnline Project Time Management version 1.0 suffers from a remote SQL injection vulnerability.
Banco Guayaquil for iOS version 8.0.0 suffers from a script insertion vulnerability where a user can insert malicious code into their own name and could possibly be leveraged for attacks upstream.
Backdoor.Win32.Wollf.16 malware suffers from an authentication bypass vulnerability.
Backdoor.Win32.Wollf.16 malware suffers from a hardcoded credential vulnerability.
VulturiBuilder malware suffers from an insecure permissions vulnerability.