SugarCRM 6.5.18 Cross Site Scripting
Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com
SugarCRM version 6.5.18 suffers from a persistent cross site scripting vulnerability.
Change Mirror Download
Document Title:===============SugarCRM v6.5.18 - (Employees) Persistent Cross Site VulnerabilityReferences (Source):====================https://www.vulnerability-lab.com/get_content.php?id=2257Release...
Fuel CMS 1.4 Remote Code Execution
Authored by Alexandre Zanni
Fuel CMS version 1.4 suffers from a remote code execution vulnerability.
advisories | CVE-2018-16763
Change Mirror Download
#!/usr/bin/env ruby# Title: Fuel CMS 1.4 - Remote Code Execution# Exploit Author:...
Kaa IoT Platform 1.2.0 Cross Site Scripting
Authored by Mufaddal Masalawala
Kaa IoT Platform version 1.2.0 suffers from a persistent cross site scripting vulnerability.
advisories | CVE-2020-26701
Change Mirror Download
#Exploit Title: Kaa IoT Platform 1.2.0 Cross Site Scripting (XSS)Vulnerability#Date:...
AIX 5.3L /usr/sbin/lquerypv Local Root Privilege Escalation
Authored by Hacker Fantastic
AIX version 5.3L /usr/sbin/lquerypv local root privilege escalation exploit.
Change Mirror Download
/*AIX 5.3L /usr/sbin/lquerypv local root privilege escalation * ===========================================================* AIX5.3L includes a setuid root binary "lquerypv"...
Froxlor 0.10.16 Cross Site Scripting
Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com
Froxlor version 0.10.16 suffers from persistent cross site scripting vulnerabilities.
Change Mirror Download
Document Title:===============Froxlor v0.10.16 CP - (Customer) Persistent VulnerabilityReferences (Source):====================https://www.vulnerability-lab.com/get_content.php?id=2241Release Date:=============2020-11-12Vulnerability Laboratory...
WordPress Buddypress 6.2.0 Cross Site Scripting
Site vulnerability-lab.com
WordPress plugin Buddypress version 6.2.0 suffers from a persistent cross site scripting vulnerability.
Change Mirror Download
Document Title:===============Buddypress v6.2.0 WP Plugin - Persistent Web VulnerabilityReferences (Source):====================https://www.vulnerability-lab.com/get_content.php?id=2263Release Date:=============2020-11-13Vulnerability Laboratory ID (VL-ID):====================================2263Common...
Artworks Gallery 1.0 Shell Upload
Authored by Shahrukh Iqbal Mirza
Artworks Gallery version 1.0 suffers from multiple remote shell upload vulnerabilities.
advisories | CVE-2020-28688
Change Mirror Download
*Artworks Gallery - Arbitrary File Upload - RCE (Authenticated) - EditProfile*#...
Water Billing System 1.0 SQL Injection
Authored by Sarang Tumne
Water Billing System version 1.0 suffers from a remote SQL injection vulnerability.
Change Mirror Download
# Exploit Title: Water Billing System 1.0 - 'username' and 'password' parameters SQL...
WordPress Good LMS 2.1.4 SQL Injection
Authored by Abdulazeez Alaseeri
WordPress Good LMS plugin versions 2.1.4 and below suffer from a remote SQL injection vulnerability.
Change Mirror Download
# Exploit Title: Wordpress Plugin Good LMS 2.1.4 - 'id'...
SaltStack Salt REST API Arbitrary Command Execution
Authored by wvu, KPC | Site metasploit.com
This Metasploit module exploits an authentication bypass and command injection in SaltStack Salt's REST API to execute commands as the root user. The...
