B-swiss 3 Digital Signage System version 3.6.5 allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to…

ForensiTAppxService version 2.2.0.4 suffers from an unquoted service path vulnerability.

B-swiss 3 Digital Signage System version 3.6.5 suffers from an authenticated arbitrary PHP code execution vulnerability. The vulnerability is caused due to the improper verification of uploaded files in index.php…

This Metasploit module exploits command injection vulnerabilities and an insecure default sudo configuration on VyOS versions 1.0.0 through 1.1.8 to execute arbitrary system commands as root. VyOS features a restricted-shell…

Online Shop Project version 1.0 suffers from a remote SQL injection vulnerability.

Seat Reservation System version 1.0 suffers from a remote SQL injection vulnerability.

BlackCat CMS version 1.3.6 suffers from a cross site request forgery vulnerability.

Mida eFramework version 2.9.0 suffers from having a backdoor access vulnerability.