>> CATEGORY: exploit

OpenCATS version 0.9.4 suffers from a remote code execution vulnerability.

Raspberry Pi version 5.10 has default credentials of pi/raspberry. This has been a known standard of theirs for a long time but it has been formally given a CVE.

Kabir Alhasan Student Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Employees Daily Task Management System version 1.0 suffers from multiple persistent cross site scripting vulnerabilities. Original discovery of this vulnerability it attributed to Ragavender A G in November of 2021.

Employees Daily Task Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Chikitsa Patient Management System version 2.0.2 suffers from a plugin related authenticated remote code execution vulnerability.

Chikitsa Patient Management System version 2.0.2 suffers from a backup related authenticated remote code execution vulnerability.

MTPutty version 1.0.1 suffers from an SSH password disclosure vulnerability.

WordPress Catch Themes Demo Import plugin versions 1.6.1 and below suffer from a remote shell upload vulnerability.

TestLink versions 1.16 through 1.19 suffer from an arbitrary file download vulnerability.