-
PHP MySQLi Database Class 2.9.2 SQL Injection
PHP Files ≈ Packet Storm Mar 16, 2019 | 14:22 pmPHP MySQLi Database Class version 2.9.2 which is from joshcam suffers from a remote SQL injection vulnerability.
Read more... -
Pegasus CMS 1.0 Remote Code Execution
PHP Files ≈ Packet Storm Mar 14, 2019 | 21:22 pmPegasus CMS version 1.0 suffers from a code execution vulnerability in extra_fields.php.
Read more... -
Ubuntu Security Notice USN-3902-2
PHP Files ≈ Packet Storm Mar 13, 2019 | 00:11 amUbuntu Security Notice 3902-2 - USN-3902-1 fixed a vulnerability in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM. It was discovered that the PHP XML-RPC module incorrectly handled decoding XML data. A remote attacker could possibly use[…]
Read more... -
elFinder PHP Connector exiftran Command Injection
PHP Files ≈ Packet Storm Mar 12, 2019 | 18:30 pmThis Metasploit module exploits a command injection vulnerability in elFinder versions prior to 2.1.48. The PHP connector component allows unauthenticated users to upload files and perform file modification operations, such as resizing and rotation of an image. The file name[…]
Read more... -
Debian Security Advisory 4403-1
PHP Files ≈ Packet Storm Mar 8, 2019 | 19:32 pmDebian Linux Security Advisory 4403-1 - Multiple security issues were found in PHP, a widely-used open source of invalid memory access and rename() was implemented insecurely.
Read more... -
QNAP TS-431 QTS Remote Command Execution
PHP Files ≈ Packet Storm Mar 7, 2019 | 20:02 pmThis Metasploit module creates a virtual web server and uploads the php payload into it. Admin privileges cannot access any server files except File Station files. The user who is authorized to create Virtual Web Server can upload malicious php[…]
Read more... -
Ubuntu Security Notice USN-3902-1
PHP Files ≈ Packet Storm Mar 6, 2019 | 23:22 pmUbuntu Security Notice 3902-1 - It was discovered that the PHP XML-RPC module incorrectly handled decoding XML data. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. It was discovered[…]
Read more... -
Drupal RESTful Web Services unserialize() Remote Code Execution
PHP Files ≈ Packet Storm Mar 6, 2019 | 19:18 pmThis Metasploit module exploits a PHP unserialize() vulnerability in Drupal RESTful Web Services by sending a crafted request to the /node REST endpoint. As per SA-CORE-2019-003, the initial remediation was to disable POST, PATCH, and PUT, but Ambionics discovered that[…]
Read more... -
OpenDocMan 1.3.4 SQL Injection
PHP Files ≈ Packet Storm Mar 5, 2019 | 04:33 amOpenDocMan version 1.3.4 suffers from a remote SQL injection vulnerability in search.php.
Read more... -
Booked Scheduler 2.7.5 Remote Command Execution
PHP Files ≈ Packet Storm Mar 5, 2019 | 02:22 amThis Metasploit module exploits a file upload vulnerability Booked 2.7.5. In the "Look and Feel" section of the management panel, you can modify the Logo-Favico-CSS files. Upload sections has file extension control except favicon part. You can upload the file[…]
Read more...
Jedesmal, wenn mit eingeschaltetem AdBlocker eine Webseite besucht wird, stirbt in einem Labor ein unschuldiges, niedliches Kaninchen einen grausamen Tod! Zusätzlich werden einige Funktionen dieser Webseite durch den AdBlocker blockiert. Bitte deaktivieren Sie Ihren AdBlocker für diese Webseite und retten Sie unschuldige Kaninchen!
Sie können durch Schliessen dieses Fensters natürlich mit AdBlocker weitermachen - wenn Sie mit dieser Schuld leben können .... es liegt an Ihnen - AdBlocker abschalten und ruhig schlafen können oder mit AdBlocker weitermachen und von übelsten Albträumen gequält werden!
Wir haben Sie gewarnt ....