Scripteen Image Upload script suffers from a shell upload vulnerability.

Mr Blog PHP suffers from cross site scripting and remote SQL injection vulnerabilities.

TheJshen contentManagementSystem version 1.04 suffers from a remote SQL injection vulnerability.

OpenVPN Private Tunnel version 2.8.4 suffers from an ovpnagent unquoted service path vulnerability.

ownCloud version 10.3.0 Stable suffers from a cross site request forgery vulnerability.

Apache Solr version 8.2.0 suffers from a remote code execution vulnerability.

eIDAS-Node versions 2.3 and below suffer from an authentication bypass vulnerability.

This archive contains all of the 170 exploits added to Packet Storm in October, 2019.

This Metasploit module exploits the trusted $PATH environment variable of the SUID binary omniresolve in Micro Focus (HPE) Data Protector versions A.10.40 and below. The omniresolve executable calls the oracleasm…