CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.
RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to overwrite any file in the web root (along with any other file on the server that the PHP process user has the proper permissions to write). Furthermore, an attacker might leverage the capability of arbitrary file overwrite to modify existing file such as /etc/passwd or /etc/shadow if the current PHP process user is run as root.
An attacker can craft a malicious MHT file containing an invalid Content-Location header directive, which when opened on disk with Internet Explorer will bypass ActiveX control warnings and popup blocker privacy settings.
A stored XSS vulnerability exists in the Employees Daily Task Management System 1.0 web application. An attacker can leverage this vulnerability in order to run javascript on the web server surfers behalf, which can lead to cookie stealing, defacement and more. The attacker can inject malicious payloads into the 'title' and 'Task Description' parameters of the 'view_task' page, or the 'full name' and 'contact number' parameters of the 'manage_account' page.
An SQL Injection vulnerability exists in the Employees Daily Task Management System admin login form which can allow an attacker to bypass authentication. The following payload will allow an attacker to bypass the authentication mechanism of the Engineers Online Portal login form - 123'+or+1=1+--+-
MTPutty is vulnerable to a password disclosure vulnerability. By running the command “Get-WmiObject Win32_Process | select name, commandline | findstr putty.exe” on powershell, an attacker can view the hidden password.
A successful attempt would require the local user to be able to insert their code in the system root path undetected by the OS or other security applications where it could potentially be executed during application startup or reboot. If successful, the local user's code would execute with the elevated privileges of the application.
Session cookie 'OCSESSID' is inproperly processed, allowing an attacker to set any value cookie and server set this value, resulting in a session injection and session fixation vulnerability.
This exploit allows an attacker to gain access to sensitive information from the WP Guppy plugin by using the WP_JSON API. The attacker can use the exploit to get all users, send messages from/to other users, and get the chats between users.
A stored Cross-Site Scripting (XSS) vulnerability exists in AccessPress Social Icons 1.8.2 WordPress plugin. An attacker can inject malicious JavaScript code into the 'icon title' field and the code will be stored in the database. When a user visits the page, the malicious code will be executed.
Services By CQR