This Metasploit module exploits a command injection vulnerability in elFinder versions prior to 2.1.48. The PHP connector component allows unauthenticated users to upload files and perform file modification operations, such…
WordPress Plugin GraceMedia Media Player 1.0 – Local File Inclusion
Core FTP Server FTP / SFTP Server v2 Build 674 – ‘MDTM’ Directory Traversal
Microsoft Windows – .reg File / Dialog Box Message Spoofing
Core FTP Server FTP / SFTP Server v2 Build 674 – ‘SIZE’ Directory Traversal
MeteoTemplate version 17.1 with Nectarine Diary plugin version 4.0 suffers from an open redirection vulnerability.
MeteoTemplate version 17.1 with Nectarine globalSnow plugin version 1.1 suffers from an open redirection vulnerability.
Meteotemplate version 17.1 with Nectarine indoorData plugin version 4.0 suffers from an open redirection vulnerability.
TeamCity versions prior to 9.0.2 disable registration bypass exploit.