This Metasploit module exploits a Java deserialization vulnerability in Apache OFBiz’s unauthenticated SOAP endpoint /webtools/control/SOAPService for versions prior to 17.12.06.
Atlassian Jira Service Desk 4.9.1 – Unrestricted File Upload to XSS
Composr CMS 10.0.36 – Cross Site Scripting
RockstarService.exe suffers from an insecure file permissions vulnerability.
Simple Food Website version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Simple Traffic Offense System version 1.0 suffers from a persistent cross site scripting vulnerability.
Basic Shopping Cart version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Trojan.Win32.Sharer.h malware suffers from a code execution vulnerability.
OpenEMR version 4.1.0 remote SQL Injection exploit.
Trojan.Win32.Sharer.h malware suffers from a man-in-the-middle vulnerability.