Backdoor.Win32.Wollf.16 malware suffers from a hardcoded credential vulnerability.
4ce52164a4ee3f9382baf71f4c27d495Backdoor.Win32.Wollf.16 malware suffers from an authentication bypass vulnerability.
a6064aef3963aa3ad1d965feafc34c41Banco Guayaquil for iOS version 8.0.0 suffers from a script insertion vulnerability where a user can insert malicious code into their own name and could possibly be leveraged for attacks upstream.
9fe795c9676108261961f6cb37a2628dOnline Project Time Management version 1.0 suffers from a remote SQL injection vulnerability.
29db9e4141f52450f2461938b5b01425This Metasploit module exploits a command injection vulnerability in Grandstream GXV3175 IP multimedia phones. The settimezone action does not validate input in the timezone parameter allowing injection of arbitrary commands. A buffer overflow in the phonecookie cookie parsing allows authentication to be bypassed by providing an alphanumeric cookie 93 characters in length. This module was tested successfully on Grandstream GXV3175v2 hardware revision V2.6A with firmware version 1.0.1.19.
d0714d342ba12f124e7b2588f1b2bde6VMware vCenter Server is affected by the Log4Shell vulnerability whereby a JNDI string can be sent to the server that will cause it to connect to the attacker and deserialize a malicious Java object. This results in OS command execution in the context of the root user in the case of the Linux virtual appliance and SYSTEM on Windows. This Metasploit module will start an LDAP server that the target will need to connect to. This exploit uses the logon page vector.
32d2d28bcb4dba8e71d1328de3ecb778Ransomware Builder Babuk malware suffers from an insecure permissions vulnerability.
a0cd8289685e1605dfafad9ad4ee310eBackdoor.Win32.Wisell malware suffers from a remote command execution vulnerability.
235e6158650f534d03cf794bbe213c8cThe panel for Collector Stealer malware version 2.0.0 suffers from a man-in-the-middle vulnerability.
78d4972e4013313c7d6d598a0bb2c3dcThe panel for Collector Stealer malware version 2.0.0 stores the login credentials in plaintext in its MySQL database. Third-party attackers who gain access to the system can read the database username passwords without having to crack them offline.
6e13ca6b026a5716e7f55a09e24384c8VulturiBuilder malware suffers from an insecure permissions vulnerability.
ae3e3340f93567f3bbe330d3e69b0088WordPress Email Template Designer – WP HTML Mail plugin versions 3.0.9 and below suffer from a cross site scripting vulnerability.
961ed2fa6e6f7b7b1b24ccf2f6d4c866Archeevo version 5.0 suffers from a local file inclusion vulnerability.
d4916c25ed879d611b512e54a177db61Landa Driving School Management System version 2.0.1 suffers from an arbitrary file upload vulnerability.
7963549ed3c7725b16cd7edcb0f82465Online Resort Management System version 1.0 suffer from remote SQL injection vulnerabilities. Original discovery of SQL injection in this version is attributed to nu11secur1ty on January 10, 2022.
372024ce26beb70ad0af01de139944e2Simple Chatbot Application version 1.0 suffers from a remote shell upload vulnerability.
496e3c1a6fdd0c52e04197b0bf576217Simple Chatbot Application version 1.0 suffers from a remote blind SQL injection vulnerability.
423037e1de190035b5f4204ba5afecb3Nyron version 1.0 suffers from a remote SQL injection vulnerability.
ebda646b81bc44e41070a684f17492a0OpenBMCS version 2.4 suffers from a secret disclosure vulnerability.
6afd87bfc0acebdfb54ecbd91b4f947dOpenBMCS version 2.4 suffers from remote file inclusion and server-side request forgery vulnerabilities.
a07cdb05430fee7d884a0a15435b9828AgentTesla Builder Web Panel malware suffers from a remote SQL injection vulnerability.
efe393eb9fdd53e136eeefd29b90bee0AgentTesla Builder Web Panel malware suffers from a cross site scripting vulnerability.
741fff0bd029276b220bf7cb36a805a8OpenBMCS version 2.4 create administrator proof of concept exploit that leverages a remote privilege escalation vulnerability.
86c9cf2aaa58913dbceecc5bc3d8f507OpenBMCS version 2.4 suffers from an authenticated remote SQL injection vulnerability.
f3540f568b23385709de647199567647Chaos Ransomware Builder version 4 malware suffers from an insecure permissions vulnerability.
c2c268f6fc5d05f302cf1e4ba898e768
© 2020 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed