The POST parameter 'comment_author' is vulnerable to stored cross site scripting. An attacker can inject malicious JavaScript code into the comment_author parameter, which will be executed when the victim visits the page.
The GET parameter 'category.php?cat_id=' is vulnerable to SQL Injection. By exploiting the SQL Injection vulnerability by using the mentioned payload, an attacker will be able to retrieve the database name and version of mysql running on the server.
The form parameter 'cfg[app_app_name]' is vulnerable to stored cross site scripting. An attacker can inject malicious JavaScript code into the parameter which will be executed when the page is loaded.
Default installations of ManageEngine ServiceDesk Plus 10.0 were found to be vulnerable to a XSS injected by a workstation local administrator. Using the installed program names of the computer as a vector, the local administrator can execute JavaScript cods in the context of the ManageEngine ServiceDesk Plus application.
Pinger 1.0 is a simple jQuery frontend to php backend that pings various devices and changes colors from green to red depending on if device is up or down. An attacker can exploit this vulnerability by sending a malicious payload to the ping.php and socket.php parameters, which will be executed on the server.
Django 3.0 is vulnerable to Cross-Site Request Forgery (CSRF) token bypass. An attacker can bypass the CSRF token by using the Session() class from the requests library to get the cookies and csrf token from the target URL. The attacker can then use the csrf token to login to the target URL.
The vulnerability exists due to insufficient sanitization of user-supplied input passed via the 'link' parameter to the '/ush/gates/token.php' script. A remote attacker can execute arbitrary SQL commands in the application's database, cause denial of service, access or modify sensitive data, or exploit various vulnerabilities in the underlying SQL server software.
Centos WebPanel (http://centos-webpanel.com/) is a free Linux web hosting control panel designed for quick and easy management of (Dedicated & VPS) servers without of need to use ssh console for every little thing. This vulnerability allows an attacker to inject malicious SQL queries into the 'term' parameter of the 'loader_ajax.php' script, which can be used to extract sensitive information from the database or to execute arbitrary code on the server. The payloads used for exploiting this vulnerability are an Error Based SQL Injection and a Time Based SQL Injection.
The vulnerability exists due to insufficient filtration of user-supplied input passed via the 'feedid' parameter to the '/index.php' script. A remote attacker can execute arbitrary SQL commands in application's database, cause denial of service, access or modify sensitive data, exploit various vulnerabilities in the underlying SQL server software, etc.
This module exploits an issue in Google Chrome 80.0.3987.87 (64 bit). The exploit corrupts the length of a float array (float_rel), which can then be used for out of bounds read and write on adjacent memory. The relative read and write is then used to modify a UInt64Array (uint64_aarw) which is used for read and writing from absolute memory. The exploit then uses WebAssembly in order to allocate a region of RWX memory, which is then replaced with the payload shellcode. The payload is executed within the sandboxed renderer process, so the browser must be run with the --no-sandbox option for the payload to work correctly.
Services By CQR