Exploits & CVE's

Authored by Hejap Zairy Sports Complex Booking System version 1.0 suffers from a remote blind SQL injection vulnerability that can be used to escalate privileges and execute code. Change Mirror Download #...

Authored by Hejap Zairy Microfinance Management System version 1.0 suffers from a remote blind SQL injection vulnerability that can be used to escalate privileges and execute code. Change Mirror Download # Title:...

Authored by Hejap Zairy Event Management System version 1.0 suffers from a remote shell upload vulnerability. Change Mirror Download # Title: Event Management System 1.0 Shell Upload# Author: Hejap Zairy#...

Authored by Sick Codes, zadewg RTLO injection URI spoofing generator for WhatsApp, iMessage, Instagram, and Facebook Messenger. advisories | CVE-2020-20093, CVE-2020-20094, CVE-2020-20095, CVE-2020-20096 Change Mirror Download # Exploit Title: RTLO Injection URI Spoofing:...

Authored by EgiX | Site karmainsecurity.com ImpressCMS versions 1.4.2 and below pre-authentication SQL injection to remote code execution exploit. User input passed through the "groups" POST parameter to the /include/findusers.php...

Authored by EgiX | Site karmainsecurity.com ImpressCMS versions 1.4.2 and below suffer from a path traversal vulnerability that can allow for arbitrary file deletion. advisories | CVE-2021-26601 Change Mirror Download -----------------------------------------------------------------ImpressCMS <= 1.4.2...

Authored by EgiX | Site karmainsecurity.com ImpressCMS versions 1.4.2 and below suffer from an incorrect access control vulnerability. advisories | CVE-2021-26598 Change Mirror Download --------------------------------------------------------------------------ImpressCMS <= 1.4.2 (findusers.php) Incorrect Access Control Vulnerability-------------------------------------------------------------------------- Software...

Authored by EgiX | Site karmainsecurity.com ImpressCMS versions 1.4.3 and below suffer from a remote SQL injection vulnerability. advisories | CVE-2021-26599 Change Mirror Download ---------------------------------------------------------------ImpressCMS <= 1.4.3 (findusers.php) SQL Injection Vulnerability--------------------------------------------------------------- Software Link:https://www.impresscms.org...

Authored by Hassan Khan Yusufzai WordPress Amministrazione Aperta plugin version 3.7.3 suffers from an arbitrary file read vulnerability. Change Mirror Download # Exploit Title: WordPress Plugin amministrazione-aperta 3.7.3 - Local File Read...

Authored by Milad Karimi Drupal Avatar Uploader version 7.x-1.0-beta8 suffers from a cross site scripting vulnerability. Change Mirror Download # Exploit Title: Drupal avatar_uploader v7.x-1.0-beta8 - Cross Site Scripting (XSS)# Date: 2022-03-22#...