>> CATEGORY: exploit

Jobberbase version 2.0 suffers from a remote SQL injection vulnerability.

PilusCart versions 1.4.1 and below suffers from a file disclosure vulnerability.

Tableau suffers from an XML external entity injection vulnerability.

This is an Nmap NSE script to detect where or not a target is vulnerable to the Pulse Secure SSL VPN file disclosure vulnerability. It reads /etc/passwd.

LSoft ListServ versions prior to 16.5-2018a suffer from a cross site scripting vulnerability.

Realtek Managed Switch Controller RTL83xx suffers from a stack overflow vulnerability. Full exploit provided.

ProGrade/Lierda Grill Temperature version 1.00_50006 suffers from having hard-coded credentials that allow for denial of service and information disclosure attacks.

WordPress UserPro versions 4.9.32 and below suffer from a cross site scripting vulnerability.

Joomla version 1.5.26 with AlphaContent component 3.x suffers from a remote SQL injection vulnerability.

Joomla version 1.5.26 with FireBoard component version 1.1.3 suffers from a remote SQL injection vulnerability.