>> CATEGORY: exploit

BitZoom version 1.0 suffers from a remote SQL injection vulnerability.

This Metasploit module exploits CVE-2018-17456, which affects Git versions 2.14.5, 2.15.3, 2.16.5, 2.17.2, 2.18.1, and 2.19.1 and lower. When a submodule url which starts with a dash e.g “-u./payload” is…

BiP Messenger suffers from a denial of service vulnerability.

Net-Billetterie version 2.9 suffers from a remote SQL injection vulnerability.

Galaxy Forces MMORPG version 0.5.8 suffers from a remote SQL injection vulnerability.

EverSync version 0.5 suffers from an arbitrary file download vulnerability.

Meneame English Pligg version 5.8 suffers from a remote SQL injection vulnerability.

Kordil EDMS version 2.2.60rc3 suffers from a remote shell upload vulnerability.

Simple E-Document version 1.31 suffers from a remote SQL injection vulnerability.

2-Plan Team version 1.0.4 suffers from a remote shell upload vulnerability.