The Latest Infosec News, Tools, and Exploits – Got Root?
Overview Sifter is a osint, recon & vulnerability scanner. It combines a plethara of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and […]
WordPress Good LMS plugin versions 2.1.4 and below suffer from a remote SQL injection vulnerability.
This Metasploit module exploits a code execution vulnerability within the ASUS TM-AC1900 router as an authenticated user. The vulnerability is due to a failure filter out percent encoded newline characters within the HTTP argument SystemCmd […]
The WordPress File Manager (wp-file-manager) plugin versions 6.0 through 6.8 allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, […]
CMSUno version 1.6.2 user remote code execution exploit. This is a variant of the vulnerability discovered by the same researcher in November of 2020.
Customer Support System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Customer Support System version 1.0 suffers from a cross site request forgery vulnerability.
Microsoft Windows suffers from a local spooler bypass vulnerability.
Monitorr version 1.7.6m suffers from an authorization bypass vulnerability.
Apache Flink version 1.9.x suffers from a remote code execution vulnerability via a malicious upload.
