Exploits & CVE's

Authored by Fernando Mengali YahooPOPs version 1.6 remote denial of service exploit. Change Mirror Download use IO::Socket; sub intro { print q { ...

Authored by Valentin Lobstein Vinchin Backup and Recovery versions 7.2 and below suffer from a command injection vulnerability in the setNetworkCardInfo function. advisories | CVE-2024-22900 Change Mirror Download CVE ID: CVE-2024-22900Title: Command Injection...

Authored by Spencer McIntyre, Harsh Jaiswal, Rahul Maini | Site metasploit.com This Metasploit module exploits an SSTI injection in Atlassian Confluence servers. A specially crafted HTTP request uses the injection...

Authored by David Gnedt | Site sba-research.org CloudLinux CageFS versions 7.1.1-1 and below pass the authentication token as a command line argument. In some configurations this allows local users to...

Authored by David Gnedt | Site sba-research.org CloudLinux CageFS versions 7.0.8-2 and below insufficiently restrict file paths supplied to the sendmail proxy command. This allows local users to read and...

Authored by Valentin Lobstein Vinchin Backup and Recovery versions 7.2 and below suffer from a command injection vulnerability in the syncNtpTime function. advisories | CVE-2024-22899 Change Mirror Download CVE ID: CVE-2024-22899Title: Command Injection...

Authored by Valentin Lobstein A critical security issue has been discovered in Vinchin Backup and Recovery version 7.2. The software has been found to use default MYSQL credentials, which could...

Authored by Valentin Lobstein Vinchin Backup and Recovery version 7.2 has been identified as being configured with default root credentials, posing a significant security vulnerability. advisories | CVE-2024-22902 Change Mirror Download CVE ID:...

Authored by Valentin Lobstein Vinchin Backup and Recovery versions 7.2 and below suffer from a command injection vulnerability in SystemHandler.class.php. advisories | CVE-2024-22903 Change Mirror Download CVE ID: CVE-2024-22903Title: Command Injection Vulnerability in...

Authored by Valentin Lobstein, smcintyre-r7 | Site metasploit.com This Metasploit module exploits a command injection vulnerability in MajorDoMo versions before 0662e5e. advisories | CVE-2023-50917 Change Mirror Download ### This module requires Metasploit: https://metasploit.com/download#...