Exploiting a Cross-site request forgery (CSRF) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature - GitHub - electronicbots/CVE-2021-31760: Exploiti...

一：漏洞描述🐑用友 U8 OA test.jsp文件存在 SQL注入漏洞，由于与致远OA使用相同的文件，于

We recently discovered a vulnerability in Composer, the main package manager for PHP, and were able to use it to take over the central repository, packagist.org.

TL;DR Find out how vulnerabilities in TG8 Firewall allows remote unauthenticated users to execute arbitrary code on the remote device as well as disclose the passwords of existing accounts. Vulnerability Summary Two security vulnerabilities in TG8 Firewall…

Find out how a vulnerability in VoIPmonitor allows an unauthenticated attacker to execute arbitrary code.

In a previous blog post I had presented a creative method to resurrect a bricked device, in this post I will go over an authentication bypass vulnerability discovered within the running firmware.

  by Mitja Kolsek, the 0patch Team On April 21, security researcher Adrian Denkiewicz published an in-depth analysis of a local privilege...

David Smiley gg真是伤了我的心

Find out how a directory traversal vulnerability in Ivanti Avalanche allows remote unauthenticated user to access files that reside outside the 'image' folder.

The cat's out of the bag via https://www.openwall.com/lists/oss-security/2021/05/10/5
This module uses a slightly different injection primitive using \c to eat ExifTool's cleansing \
It cou...

Xmind 2020 - XSS to RCE | Sploitus | Exploit & Hacktool Search Engine

Trovent Security GmbH discovered multiple Cross-Site-Scripting vulnerabilities in ERPNext 13.0.0/12.18.0

Trovent Security GmbH discovered an SQL Injection vulnerability

CVE-2021-29200 Apache OFBiz RMI Bypass RCE ，通过黑名单绕过，从而造成一个反序列化远程命令执行漏洞

This adds an exploit for CVE-2021-21551 which is an IOCTL that is provided by the DBUtil_2_3.sys driver distributed by Dell that can be abused to perform kernel-mode memory read and write operation...