This Metasploit module exploits an authenticated command injection vulnerability in Artica Proxy, combined with an authentication bypass discovered on the same version, it is possible to trigger the vulnerability without…
Online Food Ordering System 1.0 – Remote Code Execution
B-swiss 3 Digital Signage System version 3.6.5 is vulnerable to an unauthenticated database download and information disclosure vulnerability. This can enable the attacker to disclose sensitive information resulting in authentication…
B-swiss 3 Digital Signage System version 3.6.5 allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to…
ForensiTAppxService version 2.2.0.4 suffers from an unquoted service path vulnerability.
B-swiss 3 Digital Signage System version 3.6.5 suffers from an authenticated arbitrary PHP code execution vulnerability. The vulnerability is caused due to the improper verification of uploaded files in index.php…
This Metasploit module exploits command injection vulnerabilities and an insecure default sudo configuration on VyOS versions 1.0.0 through 1.1.8 to execute arbitrary system commands as root. VyOS features a restricted-shell…
Online Shop Project version 1.0 suffers from a remote SQL injection vulnerability.
Seat Reservation System version 1.0 suffers from a remote SQL injection vulnerability.
BlackCat CMS version 1.3.6 suffers from a cross site request forgery vulnerability.