Saturday, April 27, 2024

Category

Vulnerabilities

Top Vulnerabilities Exploited in 2022 as revealed by FBI, CISA, and NSA

The year 2022 witnessed a surge in cyberattacks by malicious actors targeting unpatched, internet-facing systems. In a joint Cybersecurity Advisory (CSA), top cybersecurity agencies...

A word from our sponsor

spot_img

Ruckus IoT Controller (Ruckus vRIoT) remote code execution

CVE: 2020-26878 Platform: Multiple Date: 2020-11-27 # Product: Ruckus IoT Controller (Ruckus vRIoT) # Version:...

Razer Chroma SDK Server 3.16.02 – Race Condition Remote File Execution

CVE: 2020-16602 Platform: WIN Date: 2020-11-26 Exploit Title: Razer Chroma SDK Server 3.16.02 -...

Pure-FTPd 1.0.48 – Remote Denial of Service

CVE: N/A Platform: Multiple Date: 2020-11-26 tested # Exploit Title: Pure-FTPd 1.0.48 - Remote Denial...

2-Factor Authentication Bypass Flaw Reported in cPanel and WHM Software

cPanel, a provider of popular administrative tools to manage web hosting,...

SyncBreeze 10.0.28 – (password) Remote Buffer Overflow Exploit

CVE: N/A Platform: Multiple / Win / WebAPPS Date: 25-11-2020 # Exploit Title: SyncBreeze...

osCommerce 2.3.4.1 – ‘title’ Persistent Cross-Site Scripting

CVE: N/A Platform: PHP Date: 2020-11-25 # Exploit Title: osCommerce 2.3.4.1 - 'title' Persistent...

nopCommerce Store 4.30 – ‘name’ Stored Cross-Site Scripting

CVE: N/A Platform: Multiple Date: 2020-11-24 # Exploit Title: nopCommerce Store 4.30 - 'name'...

Apache OpenMeetings 5.0.0 – ‘hostname’ Denial of Service

CVE: 2020-13951 Platform: Multiple Date: 2020-11-24 # Exploit Title: Apache OpenMeetings 5.0.0 - 'hostname'...

ZeroShell 3.9.0 – ‘cgi-bin/kerbynet’ Remote Root Command Injection

CVE: 2019-12725 Platform: LINUX Date: 2020-11-24 ## # This module requires Metasploit: https://metasploit.com/download # Current source:...

Netsuveillancewebcookie Web interface password change

# Exploit Title: NetSurveillance Web interface password change # Exploit Author: AsCiI #...