CVE-2021-45007
Plesk 18.0.37 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows an attacker to insert data on the user and admin panel. Devamını Oku
Devamını oku
CVE-2021-45081
An issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol instead of the more secure HTTPS. Devamını Oku
CVE-2021-45083
An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some sensitive information that can be exposed to a local user who has non-privileged access to the server. The users.digest file contains the sha2-512 digest of users in a Cobbler local installation. In the case of…
CVE-2021-46701
PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit events to a socket, potentially interfering with a victim's "now playing" status on Discord. Devamını Oku
[webapps] Cab Management System 1.0 – Remote Code Execution (RCE) (Authenticated)
Cab Management System 1.0 – Remote Code Execution (RCE) (Authenticated)
Exploit ile ilgili teknik detaylar için Devamını Oku
Kaynak: Exploit-DB.com RSS Feed
[webapps] Microweber 1.2.11 – Remote Code Execution (RCE) (Authenticated)
Microweber 1.2.11 – Remote Code Execution (RCE) (Authenticated)
Exploit ile ilgili teknik detaylar için Devamını Oku
Kaynak: Exploit-DB.com RSS Feed
[webapps] Cab Management System 1.0 – ‘id’ SQLi (Authenticated)
Cab Management System 1.0 – ‘id’ SQLi (Authenticated)
Exploit ile ilgili teknik detaylar için Devamını Oku
Kaynak: Exploit-DB.com RSS Feed
[webapps] WordPress Plugin Perfect Survey – 1.5.1 – SQLi (Unauthenticated)
WordPress Plugin Perfect Survey – 1.5.1 – SQLi (Unauthenticated)
Exploit ile ilgili teknik detaylar için Devamını Oku
Kaynak: Exploit-DB.com RSS Feed
[local] HMA VPN 5.3 – Unquoted Service Path
HMA VPN 5.3 – Unquoted Service Path
Exploit ile ilgili teknik detaylar için Devamını Oku
Kaynak: Exploit-DB.com RSS Feed
[webapps] Thinfinity VirtualUI 2.5.26.2 – Information Disclosure
Thinfinity VirtualUI 2.5.26.2 – Information Disclosure
Exploit ile ilgili teknik detaylar için Devamını Oku
Kaynak: Exploit-DB.com RSS Feed
[webapps] Thinfinity VirtualUI 2.5.41.0 – IFRAME Injection
Thinfinity VirtualUI 2.5.41.0 – IFRAME Injection
Exploit ile ilgili teknik detaylar için Devamını Oku
Kaynak: Exploit-DB.com RSS Feed
[webapps] WordPress Plugin WP User Frontend 3.5.25 – SQLi (Authenticated)
WordPress Plugin WP User Frontend 3.5.25 – SQLi (Authenticated)
Exploit ile ilgili teknik detaylar için Devamını Oku
Kaynak: Exploit-DB.com RSS Feed