>> CATEGORY: exploit

PHP-Fusion version 9.03.60 suffers from a PHP object injection vulnerability.

This archive contains all of the 127 exploits added to Packet Storm in June, 2020.

Reside Property Management version 3.0 suffers from a remote SQL injection vulnerability.

Victor CMS version 1.0 suffers from a user_firstname persistent cross site scripting vulnerability.

This Metasploit module exploits an arbitrary file upload vulnerability together with a directory traversal flaw in ATutor versions 2.2.4, 2.2.2 and 2.2.1 in order to execute arbitrary commands.

The Cellebrite UFED Physical device relies on key material hardcoded within both the executable code supporting the decryption process and within the encrypted files themselves by using a key enveloping…

openSIS versions 7.4 and below suffer from an access bypass vulnerability.

openSIS versions 7.4 and below suffer from a local file inclusion vulnerability.

openSIS versions 7.4 and below suffer from multiple remote SQL injection vulnerabilities.

Fire Web Server Pre-Alpha version suffers from a denial of service vulnerability.