CubeCart version 6.2.2 suffers from a cross site scripting vulnerability.
CubeCart version 6.2.2 suffers from a cross site scripting vulnerability.
NEC Univerge Sv9100 WebPro version 6.00.00 suffers from predictable session identifiers and cleartext password vulnerabilities.
This Metasploit module exploits a SUID installation of the Emacs movemail utility to run a command as root by writing to 4.3BSD’s /usr/lib/crontab.local. The vulnerability is documented in Cliff Stoll’s…
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw…
HasanMWB 1.0 – SQL Injection
Linux/x86 – /usr/bin/head -n99 cat etc/passwd Shellcode (61 Bytes)
OpenSSH < 7.7 – User Enumeration (2)
Xorg X11 Server (AIX) – Local Privilege Escalation
Rockwell Automation Allen-Bradley PowerMonitor 1000 – Incorrect Access Control Authentication Bypass
Microsoft Lync for Mac 2011 – Injection Forced Browsing/Download