BEESCMS 4.0 – Cross-Site Request Forgery (Add Admin)
BEESCMS 4.0 – Cross-Site Request Forgery (Add Admin)
hycus CMS 1.0.4 – Authentication Bypass
HongCMS 3.0.0 – SQL Injection
http://muangfang.go.th/muangfang/mainfile/8ZViYMF6zcJHhtml notified by Evil-Root
Microsoft Internet Explorer HTML Help Control version 4.74 local zone bypass exploit. Proof of concept code for an ancient vulnerability.
PoDoFo version 0.9.5 suffers from a buffer overflow vulnerability.
Liferay Portal versions prior to 7.0.4 suffer from a server-side request forgery vulnerability.
Polaris Office 2017 version 8.1 allows attackers to execute arbitrary code via a trojan horse “puiframeworkproresenu.dll” file in the current working directory, due to a search order flaw vulnerability.
HP Enterprise VAN SDN Controller version 2.7.18.0503 suffers from an unauthenticated remote root vulnerability. A hard-coded service token can be used to bypass authentication. Built-in functionality can be exploited to…
This Metasploit module exploits a command injection vulnerability in Quest KACE Systems Management Appliance version 8.0.318 (and possibly prior). The download_agent_installer.php file allows unauthenticated users to execute arbitrary commands as…