what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 1 - 25 of 202 RSS Feed

Files

Packet Storm New Exploits For April, 2020
Posted May 1, 2020
Authored by Todd J. | Site packetstormsecurity.com

This archive contains all of the 201 exploits added to Packet Storm in April, 2020.

tags | exploit
SHA-256 | de2d54c316e5e787807ce732ad25725f5943fb8ff779b4e4998d4f670f9649c6
PHP-Fusion 9.03.50 Cross Site Scripting
Posted Apr 30, 2020
Authored by SunCSR

PHP-Fusion version 9.03.50 suffers from a persistent cross site scripting vulnerability.

tags | exploit, php, xss
SHA-256 | 93888b7013296958415c64c90fe2338b37bbb4b8f83c1c8cd6184a3d0aee8baa
Online Scheduling System 1.0 Authentication Bypass
Posted Apr 30, 2020
Authored by Bobby Cooke

Online Scheduling System version 1.0 suffers from an authentication bypass vulnerability.

tags | exploit, bypass
SHA-256 | 6afcc5b0051b6eec0e838842890ca8ab551609a47811313dd84cb767b3e02fed
Online Scheduling System 1.0 Cross Site Scripting
Posted Apr 30, 2020
Authored by Bobby Cooke

Online Scheduling System version 1.0 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 872919a2779e6e04e5d200971fb18ef5498c54070aaccf8201ff0a606608bc9c
VirtualTablet Server 3.0.2 Denial Of Service
Posted Apr 30, 2020
Authored by Dolev Farhi

VirtualTablet Server version 3.0.2 denial of service proof of concept exploit.

tags | exploit, denial of service, proof of concept
SHA-256 | e9c444478a217681ecd30e4776665550aa7a618d4013ed3cdb86ad100fd86fef
HardDrive 2.1 Arbitrary File Upload
Posted Apr 30, 2020
Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

HardDrive version 2.1 for iOS suffers from an arbitrary file upload vulnerability.

tags | exploit, arbitrary, file upload
systems | ios
SHA-256 | 0c34b14b82c1c179e184b9fb03967beb613f81201373e46509c51dd3086c8082
ChemInv 1 Cross Site Scripting
Posted Apr 30, 2020
Authored by Bobby Cooke

ChemInv version 1 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | ce55a4c9abc9f7ac209d854759125740884e7c0fcb843b7e2e23ca696c5974d9
Apache Shiro 1.2.4 Remote Code Execution
Posted Apr 29, 2020
Authored by L | Site metasploit.com

This Metasploit module exploits a vulnerability that allows remote attackers to execute arbitrary code on vulnerable installations of Apache Shiro version 1.2.4.

tags | exploit, remote, arbitrary
advisories | CVE-2016-4437
SHA-256 | 0f186f161bc8220e1b6f8e1a04626191746fd3904db4d3e3cd00c8971c1ab028
Druva inSync Windows Client 6.5.2 Privilege Escalation
Posted Apr 29, 2020
Authored by Chris Lyne

Druva inSync Windows Client version 6.5.2 suffers from a local privilege escalation vulnerability.

tags | exploit, local
systems | windows
advisories | CVE-2019-3999
SHA-256 | 31dfb7b5bc6e0e8460608ac6efee03fdb1a7159259a19815bc7b9c3106a68129
hits script 1.0 SQL Injection
Posted Apr 29, 2020
Authored by sajjadbnd

hits script version 1.0 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 5d84239f404367cfcc0755fee28879cc891111f6491a780d5fbb098b79daa891
EmEditor 19.8 Insecure File Permissions
Posted Apr 29, 2020
Authored by sajjadbnd

EmEditor version 19.8 suffers from an insecure file permission vulnerability.

tags | exploit
SHA-256 | a90bafdd2cbfefa34fbbea58c90b700449be9cad9a3c7d2b1c6cd4b3582cdd28
Gigamon GigaVUE 5.5.01.11 Directory Traversal / File Upload
Posted Apr 29, 2020
Authored by Balazs Hambalko

Gigamon GigaVUE version 5.5.01.11 suffers from directory traversal and file upload with command execution vulnerabilities. Gigamon has chosen to sunset this product and not offer a patch.

tags | exploit, vulnerability, file inclusion, file upload
advisories | CVE-2020-12251, CVE-2020-12252
SHA-256 | 4f94429e64d9c424c9369febb776c41eae261c908658edff22b96292c43a0a65
NVIDIA Update Service Daemon 1.0.21 Unquoted Service Path
Posted Apr 29, 2020
Authored by Roberto Pina

NVIDIA Update Service Daemon version 1.0.21 suffers from a nvUpdatusService unquoted service path vulnerability.

tags | exploit
SHA-256 | 503db033cf0df9a8ab28aa60846bb44ef7310c0396452231a748fdc182ab89db
Open-AudIT Professional 3.3.1 Remote Code Execution
Posted Apr 29, 2020
Authored by Askar

Open-AudIT Professional version 3.3.1 suffers from a remote code execution vulnerability.

tags | exploit, remote, code execution
advisories | CVE-2020-12078
SHA-256 | 5893982b84476fb326ba71dec7355182063aa15846f74c2968e884acb1e5e0f0
Open-AudIT 3.2.2 Command Injection / SQL Injection
Posted Apr 29, 2020
Authored by Core Security Technologies, Ivan Huertas, Pablo A. Zurro | Site coresecurity.com

Open-AudIT version 3.2.2 suffers from OS command injection, arbitrary file upload, and remote SQL injection vulnerabilities.

tags | exploit, remote, arbitrary, vulnerability, sql injection, file upload
advisories | CVE-2020-11941, CVE-2020-11942, CVE-2020-11943
SHA-256 | d8e9402b9604c3706a2115909b60726c461d0262c2196626918539a2164e5352
School ERP Pro 1.0 Arbitrary File Read
Posted Apr 29, 2020
Authored by Besim Altinok

School ERP Pro version 1.0 suffers from an arbitrary file read vulnerability.

tags | exploit, arbitrary
SHA-256 | 66a872f32ba02b4e93f374c2a694f871df9e25610abafbc0a4b38e5fd174d855
School ERP Pro 1.0 Remote Code Execution
Posted Apr 29, 2020
Authored by Besim Altinok

School ERP Pro version 1.0 suffers from a remote code execution vulnerability.

tags | exploit, remote, code execution
SHA-256 | 33658e4687b6ea2e6df5c71aff06b7bc6a7911ddda6e8d799b37b244ce516874
School ERP Pro 1.0 SQL Injection
Posted Apr 29, 2020
Authored by Besim Altinok

School ERP Pro version 1.0 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection
SHA-256 | 052180169bf27a5bc9f67877a3e2052703c7f8daad6418218cd20b54baf72ead
Andrea ST Filters Service 1.0.64.7 Unquoted Service Path
Posted Apr 29, 2020
Authored by Roberto Pina

Andrea ST Filters Service version 1.0.64.7 suffers from an Andrea ST Filters Service unquoted service path vulnerability.

tags | exploit
SHA-256 | f302dd9172e1413837eedc0b280c043bc3dea9f1b24226c8ff9ee918187ebe99
Chrome ReadableStream::Close Out-Of-Bounds Access
Posted Apr 28, 2020
Authored by Google Security Research, Glazvunov

Chrome suffers from an out-of-bounds access vulnerability in ReadableStream::Close.

tags | exploit
advisories | CVE-2020-6390
SHA-256 | 0c4354e2d883e9008f418c20b53a6697d384f98bd55b8f13e5cac05115930417
File Explorer 1.4 Information Disclosure
Posted Apr 28, 2020
Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

File Explorer version 1.4 for iOS suffers from an information disclosure vulnerability.

tags | exploit, info disclosure
systems | ios
SHA-256 | ea14301d1a375382b614cf4695eb405fac6da803f565cb546fa482ea056bcd0d
Transfer Master 3.3 Denial Of Service
Posted Apr 28, 2020
Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Transfer Master version 3.3 for iOS suffers from a denial of service vulnerability.

tags | exploit, denial of service
systems | ios
SHA-256 | b9a6596f4343d975491387b6c0efd8201358ab2d43217453fd2b457c61b63294
Internet Download Manager 6.37.11.1 Buffer Overflow
Posted Apr 28, 2020
Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Internet Download Manager version 6.37.11.1 suffers from multiple stack buffer overflow vulnerabilities.

tags | exploit, overflow, vulnerability
SHA-256 | bf2fbd139c8279731a36484b54ed8b9dfec5b99d1a3463612d1cff48e2e54c22
File Sharing And Chat 1.0 Denial Of Service
Posted Apr 28, 2020
Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

File Sharing and Chat version 1.0 for iOS suffers from a denial of service vulnerability.

tags | exploit, denial of service
systems | ios
SHA-256 | c66a7b587e5d56766ddbffc738da93fb383a62c08ea701cd5be6321bcf2549ea
Easy Transfer 1.7 Cross Site Scripting / Directory Traversal
Posted Apr 28, 2020
Authored by Benjamin Kunz Mejri, Vulnerability Laboratory | Site vulnerability-lab.com

Easy Transfer version 1.7 for iOS suffers from cross site scripting and directory traversal vulnerabilities.

tags | exploit, vulnerability, xss
systems | ios
SHA-256 | e1d1fd4ef3b5d9a2ecd4486677c8c2bdaa9be2ff977e3a1ce3b6718426fcbd30
Page 1 of 9
Back12345Next

Top Authors In Last 30 Days

Recent News

News RSS Feed
Google Patches Critical Chrome Vulnerability
Posted Apr 24, 2024

tags | headline, flaw, google, patch, chrome
Hackers Are Using Developing Countries For Ransomware Practice
Posted Apr 24, 2024

tags | headline, hacker, malware, cybercrime, fraud, cryptography
Authorities Investigate LabHost Users After Phishing Service Shutdown
Posted Apr 23, 2024

tags | headline, cybercrime, fraud, phish
Windows Vulnerability Reported By The NSA Exploited To Install Russian Malware
Posted Apr 23, 2024

tags | headline, government, microsoft, usa, russia, flaw, cyberwar, spyware, nsa
UnitedHealth Admits Breach Could Cover Substantial Proportion Of People In America
Posted Apr 23, 2024

tags | headline, hacker, privacy, data loss
Microsoft DRM Hack Could Allow Movie Downloads From Streaming
Posted Apr 23, 2024

tags | headline, microsoft, flaw, pirate
Over A Million Neighbourhood Watch Members Exposed
Posted Apr 23, 2024

tags | headline, privacy, britain, data loss
MITRE Hacked By State Sponsored Group Via Ivanti Zero Days
Posted Apr 23, 2024

tags | headline, hacker, government
Russia's Sandworm APT Linked To Attack On Texas Water Plant
Posted Apr 18, 2024

tags | headline, malware, usa, russia, cyberwar, scada
EU Tells Meta It Can't Paywall Privacy
Posted Apr 18, 2024

tags | headline, government, privacy, facebook, social
View More News →
packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close