Laravel Valet 2.0.3 – Local Privilege Escalation (macOS)
>> AUTHOR: deepcore
Laravel Valet 2.0.3 – Local Privilege Escalation (macOS)
Apache Log4j 2 – Remote Code Execution (RCE)
WordPress Plugin Typebot 1.4.3 – Stored Cross Site Scripting (XSS) (Authenticated)
Microsoft Internet Explorer / ActiveX Control – Security Bypass
HD-Network Real-time Monitoring System 2.0 – Local File Inclusion (LFI)
WebHMI 4.0 – Remote Code Execution (RCE) (Authenticated)
This document covers a vulnerability in policy kit (polkit) used on many Linux distributions, which enables an unprivileged local user to get a privileged shell (root) on the system by…
Apache Log4j2 versions 2.14.1 and below proof of concept remote code execution exploit. JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and…
Free School Management Software version 1.0 suffers from a remote shell upload vulnerability.