ERPNext version 12.14.0 suffers from an authenticated remote SQL injection vulnerability.
152e5fd7d5acb8bc4b494946522659f5LibreNMS version 1.46 suffers from an authenticated remote SQL injection vulnerability in the MAC Account Graph. Original discovery of SQL injection in this version is attributed to Punt in May of 2020.
f2ded99e14c6ef8d7a6b3197a0529feeManageEngine Applications Manager authenticated remote code execution exploit that leverages the newInstance() and loadClass() methods being used by the "WeblogicReference", when attempting a Credential Test for a new Monitor. Versions below 14720 are affected.
c91e6651f35b95c2f31437f3f8bc1b36ATutor LMS version 2.2.4 suffers from having a weak password reset hash.
63f346a37c58f06e15e7f77022dc02bfAIDA64 Engineer version 6.20.5300 Report File filename SEH buffer overflow exploit.
6590017886deb392714463804d9171f610Strike LANState version 9.32 on x86 Host Check hostname SEH buffer overflow exploit.
7f1eb06b56c5aa79bd94057284b6f22210-Strike Network Inventory Explorer version 9.03 Read-from-file buffer overflow exploit that uses SEH and ROP.
4149e3e557d63c733212a574642fceedFreeCommander XE 2020 Build 810a 32-bit suffers from a pathname buffer overflow vulnerability.
6266ab0960d59612e8b66b9812e41dd0Yachtcontrol versions dated 2019-10-06 suffer from an unauthenticated remote code execution vulnerability.
ca74a5272a744f07e91607ab0200e00aCore FTP version 2.0 build 653 suffers from a PBSZ command denial of service vulnerability.
1c1de1481d4cb8235b7bfeb45179b294Anyburn version 4.3 x86 "Copy disc to image file" buffer overflow SEH unicode exploit.
8e92d805dee2a379fca84a0aa0ea1ddaRealTerm Serial Terminal version 2.0.0.70 suffers from an echo port buffer overflow vulnerability. Modifications to the original proof of concept include the fact that it uses a larger payload size for shellcode due to different jump offsets and filters the bad character 0x3a as this is the character for port which causes an error ":".
9b31bdb38b680b223198f700a17dcfa6This archive contains a Linux x86/x64 payload AES-128 CBC encrypter and payload decrypter/runner.
5a5ac347d6ff823061529155881b38a8Ricoh myPrint suffers from hardcoded application credential and information disclosure vulnerabilities. The myPrint windows client version 2.9.2.4 and myPrint android client version 2.2.7 are both affected.
4d051bae92eaadb5058aaec46aca59d2Easy File Sharing Web Server version 6.9 POST msg.ghp UserID remote buffer overflow SEH exploit with DEP bypass and ROP.
b31f7c399d1e719caf9218f318385547
© 2020 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed