Subscribe via feed.

[webapps] Company's Recruitment Management System 1.0 – 'Multiple' SQL Injection (Unauthenticated)

Posted by deepcore under Security (No Respond)

Company’s Recruitment Management System 1.0 – ‘Multiple’ SQL Injection (Unauthenticated)

Tags: ,

[webapps] Keycloak 12.0.1 – 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated)

Posted by deepcore under Security (No Respond)

Keycloak 12.0.1 – ‘request_uri ‘ Blind Server-Side Request Forgery (SSRF) (Unauthenticated)

Tags: ,

[remote] Cypress Solutions CTM-200/CTM-ONE – Hard-coded Credentials Remote Root (Telnet/SSH)

Posted by deepcore under Security (No Respond)

Cypress Solutions CTM-200/CTM-ONE – Hard-coded Credentials Remote Root (Telnet/SSH)

Tags: ,

[webapps] Apache HTTP Server 2.4.50 – Path Traversal & Remote Code Execution (RCE)

Posted by deepcore under Security (No Respond)

Apache HTTP Server 2.4.50 – Path Traversal & Remote Code Execution (RCE)

Tags: ,

[webapps] Pharmacy Point of Sale System 1.0 – 'Add New User' Cross-Site Request Forgery (CSRF)

Posted by deepcore under Security (No Respond)

Pharmacy Point of Sale System 1.0 – ‘Add New User’ Cross-Site Request Forgery (CSRF)

Tags: ,

[remote] Cypress Solutions CTM-200 2.7.1 – Root Remote OS Command Injection

Posted by deepcore under Security (No Respond)

Cypress Solutions CTM-200 2.7.1 – Root Remote OS Command Injection

Tags: ,

[webapps] Online Learning System 2.0 – 'Multiple' SQLi Authentication Bypass

Posted by deepcore under Security (No Respond)

Online Learning System 2.0 – ‘Multiple’ SQLi Authentication Bypass

Tags: ,

[webapps] Simple Issue Tracker System 1.0 – SQLi Authentication Bypass

Posted by deepcore under Security (No Respond)

Simple Issue Tracker System 1.0 – SQLi Authentication Bypass

Tags: ,

[webapps] Student Quarterly Grading System 1.0 – 'grade' Stored Cross-Site Scripting (XSS)

Posted by deepcore under Security (No Respond)

Student Quarterly Grading System 1.0 – ‘grade’ Stored Cross-Site Scripting (XSS)

Tags: ,

[webapps] Logitech Media Server 8.2.0 – 'Title' Cross-Site Scripting (XSS)

Posted by deepcore under Security (No Respond)

Logitech Media Server 8.2.0 – ‘Title’ Cross-Site Scripting (XSS)

Tags: ,