This Metasploit module exploits local file inclusion and log poisoning vulnerabilities (CVE-2020-16152) in Aerohive NetConfig, version 10.0r8a build-242466 and older in order to achieve unauthenticated remote code execution as the…
This Metasploit module exploits local file inclusion and log poisoning vulnerabilities (CVE-2020-16152) in Aerohive NetConfig, version 10.0r8a build-242466 and older in order to achieve unauthenticated remote code execution as the…
Mumara Classic 2.93 – ‘license’ SQL Injection (Unauthenticated)
Windows MultiPoint Server 2011 SP1 – RpcEptMapper and Dnschade Local Privilege Escalation
Xlight FTP 3.9.3.1 – Buffer Overflow (PoC)
WordPress Plugin AccessPress Social Icons 1.8.2 – ‘icon title’ Stored Cross-Site Scripting (XSS)
WordPress Plugin WP Symposium Pro 2021.10 – ‘wps_admin_forum_add_name’ Stored Cross-Site Scripting (XSS)
Employee and Visitor Gate Pass Logging System version 1.0 suffers from a persistent cross site scripting vulnerability.
Employee Daily Task Management System version 1.0 suffers from a persistent cross site scripting vulnerability.
Dolibarr ERP and CRM version 13.0.2 suffer from a persistent cross site scripting vulnerability.