This Metasploit module exploits an unauthenticated command injection vulnerability in Roxy-WI versions prior to 6.1.1.0. Successful exploitation results in remote code execution under the context of the web server user. Roxy-WI is an interface for managing HAProxy, Nginx and Keepalived servers.
96d069f907bcd7cf304913bbed0abdeaec0d86467550d0c7535f3ee8826057d3Ubuntu Security Notice 5532-1 - It was discovered that Bottle incorrectly handled errors during early request binding. An attacker could possibly use this issue to disclose sensitive information.
937092709ddca808a6602fa8cc0156cbcdaa52e92f420cc7a326e661c2f5e217Hospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
fe66c661132cc964be237a78b59c37dd33812105a69f943e40034432ba9e37b1Garage Management System version 1.0 suffers from a remote shell upload vulnerability.
ab0ebb6c87eb34a7a0f252098e28dd19c540d7bd1bf348be3b734685516a5a76Expert X Jobs Portal and Resume Builder version 1.0 suffers from a remote SQL injection vulnerability.
376564ceda2e198de8dceb8ed5116a678ef9962cb5cead849c271870ad95168ePCProtect Endpoint version 5.17.470 fails to provide sufficient anti-tampering protection that can be leveraged to achieve SYSTEM privileges.
2d06bd74496b08a5700c2c8e026dcb7ac169ea6a7167829bfbda24a822742cfd
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed