sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.
5cdd29b4a86913962ab1eecc1f59bd32a038d1573f70edb1760bf88f01347526Red Hat Security Advisory 2021-0733-01 - IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 7 to version 7R1 SR4-FP80. Issues addressed include a buffer overflow vulnerability.
220296e63c11a155ecd311f76ff76ce974042afdc9109749d164658b678ef8dbRed Hat Security Advisory 2021-0717-01 - IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 8 to version 8 SR6-FP25. Issues addressed include buffer overflow and bypass vulnerabilities.
86fed55082dfe5113bbbd7e9719aebf8864ba5f06dcdf64c77804045dcdd2e34Textpattern CMS version 4.8.3 remote code execution exploit.
5d72f66d478a2984ca653c4a364a7b05f0376f43326f5771233c541c2b4d625fTextpattern CMS version 4.9.0-dev suffers from a persistent cross site scripting vulnerability.
ad8a4cc22bbea799bfbc2e76a5337a4170eb3ca45fa8a7fe56c15a8e6bf2783cTextpattern CMS version 4.8.4 suffers from a persistent cross site scripting vulnerability.
c30876554e54fa22632ea285270171ff16b7bdb5d30c2aefe89391bbbe49f702Whitepaper called Android Vulnerability in ES File Explorer. It provides an overview of manual exploitation of ES File Explorer version 4.1.9.7.4 using counterfeit requests over HTTP.
9b0d580d48451b1cfce532d6de5bf7c4caa5faf0493949998e87a7e17ccea3dfRed Hat Security Advisory 2021-0719-01 - Red Hat Advanced Cluster Management for Kubernetes 2.0.8 images. Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which resolve some security issues and bugs.
2f14cab81d5c42464f47e9dcf7d3143a48bb175a76c4d60fed61e7817dcce904Online Ordering System version 1.0 suffers from an unauthenticated remote blind SQL injection vulnerability.
02c2a003ea2289cc5c78adbe8cf0c8eaacce9006c48c46fd335d58aeb07c517bOnline Ordering System version 1.0 suffers from a remote shell upload vulnerability.
343b1cdf0fec1f8ca4f1dd3b5f5f0be80b5f21a0c3dab2debd3e7d7fdf6291faRed Hat Security Advisory 2021-0727-01 - The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly. Issues addressed include a buffer overflow vulnerability.
24592df75cea3cdf3fda328953d6f7f1658da79c31c8eb0232a522f7bf1f3473Web Based Quiz System version 1.0 suffers from a remote SQL injection vulnerability.
73a84f2463726ee1df22af68003d0049e0aa2fe5141781308f37d59c45da5a17e107 CMS version 2.3.0 suffers from a cross site request forgery vulnerability.
2013ddfa8526bb4e33ae90cfcef37c362b7da19436c141db997f5e57104264f4
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed