Exploits & CVE's

Authored by Sohel Yousef Bazaar Web PHP Social Listings suffers from a remote shell upload vulnerability. Change Mirror Download <--# Exploit Title: Bazaar Web PHP Social Listings Arbitrary File Upload# Google Dork:...

Authored by h00die, Simone Cristofaro, Jerome Bruandet | Site metasploit.com This exploit requires Metasploit to have a FQDN and the ability to run a payload web server on port 80,...

Authored by citril WBCE CMS versions 1.5.1 and below suffer from an administrative password reset vulnerability. advisories | CVE-2021-3817 Change Mirror Download # Exploit Title: WBCE CMS 1.5.1 - Admin Password Reset# Google...

Authored by Halit Akaydin phpKF CMS version 3.00 Beta y6 unauthenticated remote code execution exploit. Change Mirror Download # Exploit Title: phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (Unauthenticated)#...

Authored by Jann Horn, Google Security Research This bug report describes a vulnerability in ART that allows normal applications to insert arbitrary code into unused executable memory in zygote and...

Authored by Google Security Research, Glazvunov Chrome suffers from a heap use-after-free vulnerability in ThreadedIconLoader::DecodeAndResizeImageOnBackgroundThread. advisories | CVE-2021-38005

Authored by Google Security Research, Glazvunov Chrome suffers from a site isolation bypass vulnerability in NavigationPreloadRequest. advisories | CVE-2021-38010

Authored by malvuln | Site malvuln.com Backdoor.Win32.Mellpon.b malware suffers from an information leakage vulnerability. Change Mirror Download Discovery / credits: Malvuln - malvuln.com (c) 2021Original source: https://malvuln.com/advisory/e499a4c359a8cc46e641f39c0ed548f9.txtContact: [email protected]: twitter.com/malvulnThreat: Backdoor.Win32.Mellpon.bVulnerability: Remote Unauthenticated...

Authored by L_L Arunna version 1.0.0 suffers from a cross site request forgery vulnerability. Change Mirror Download # Exploit Title: Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)# Date: November 29, 2021#...

Authored by Enes Ozeser Croogo version 3.0.2 suffers from cross site scripting vulnerabilities. Change Mirror Download # Exploit Title: Croogo 3.0.2 - 'Multiple' Stored Cross-Site Scripting (XSS)# Date: 06/12/2021# Exploit Author: Enes...