>> CATEGORY: exploit

LayerBB version 1.1.2 suffers from a cross site request forgery vulnerability.

DomainMOD version 4.11.01 suffers from multiple cross site scripting vulnerabilities.

ApowerManager version 3.1.7 suffers from a denial of service vulnerability.

Core FTP/SFTP Server version 1.2 build 589.42 suffers from a denial of service vulnerability.

This is exploit code for CVE-2019-5736 (and it works for both runc and LXC). The simplest way to use it is to copy the exploit code into an existing container,…

BizPotential EasyWebTime version 8.6.2 suffers from bypass and remote SQL injection vulnerabilities.

F3-CMS FatFreeFramework version 0.0.1 suffers from a database disclosure vulnerability.

Invo PhalconPHP version 1.x suffers from a database configuration file disclosure vulnerability.

Ispirithalaya Hospital Management System version 0.1.2 suffers from a database configuration file disclosure vulnerability.

Joomla DatsoGallery component version 3.4.4 suffers from remote SQL injection vulnerabilities.