-
PHP 7.3.15-3 PHP_SESSION_UPLOAD_PROGRESS Session Data Injection
PHP Files ≈ Packet Storm Jul 27, 2021 | 14:46 pmPHP version 7.3.15-3 suffers from a PHP_SESSION_UPLOAD_PROGRESS session data injection vulnerability.
Read more... -
WordPress SP Project And Document Remote Code Execution
PHP Files ≈ Packet Storm Jul 26, 2021 | 16:20 pmThis Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in WordPress SP Project and Document plugin versions prior to 4.22. The security check only searches for[…]
Read more... -
WordPress Modern Events Calendar Remote Code Execution
PHP Files ≈ Packet Storm Jul 26, 2021 | 16:16 pmThis Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in WordPress Modern Events Calendar plugin versions prior to 5.16.5. This is due to an incorrect check[…]
Read more... -
WordPress Backup Guard Authenticated Remote Code Execution
PHP Files ≈ Packet Storm Jul 21, 2021 | 16:23 pmThis Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Backup Guard versions prior to 1.6.0. This is due to an incorrect check of[…]
Read more... -
KevinLAB BEMS 1.0 Authenticated File Path Traversal / Information Disclosure
PHP Files ≈ Packet Storm Jul 20, 2021 | 20:44 pmKevinLAB BEMS version 1.0 suffers from an authenticated arbitrary file disclosure vulnerability. Input passed through the page GET parameter in index.php is not properly verified before being used to include files. This can be exploited to disclose the contents of[…]
Read more... -
KevinLAB BEMS 1.0 Unauthenticated SQL Injection / Authentication Bypass
PHP Files ≈ Packet Storm Jul 20, 2021 | 20:42 pmKevinLAB BEMS version 1.0 suffers from an unauthenticated SQL Injection vulnerability. Input passed through input_id POST parameter in /http/index.php is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate[…]
Read more... -
Concrete5 8.5.5 Phar Deserialization
PHP Files ≈ Packet Storm Jul 20, 2021 | 14:42 pmConcrete5 versions 8.5.5 suffer from a logging settings phar deserialization vulnerability. User input passed through the logFile request parameter is not properly sanitized before being used in a call to the file_exists() function at line 91. This can be exploited[…]
Read more... -
Ubuntu Security Notice USN-5006-2
PHP Files ≈ Packet Storm Jul 14, 2021 | 14:58 pmUbuntu Security Notice 5006-2 - USN-5006-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. It was discovered that PHP incorrectly handled certain PHAR files. A remote attacker could possibly[…]
Read more... -
Ubuntu Security Notice USN-5006-1
PHP Files ≈ Packet Storm Jul 7, 2021 | 16:15 pmUbuntu Security Notice 5006-1 - It was discovered that PHP incorrectly handled certain PHAR files. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, or possibly obtain sensitive information. This[…]
Read more... -
WordPress wpDiscuz 7.0.4 Shell Upload
PHP Files ≈ Packet Storm Jun 28, 2021 | 16:26 pmThis Metasploit module exploits an arbitrary file upload in the WordPress wpDiscuz plugin versions from 7.0.0 through 7.0.4. This flaw gave unauthenticated attackers the ability to upload arbitrary files, including PHP files, and achieve remote code execution on a vulnerable[…]
Read more...
Jedesmal, wenn mit eingeschaltetem AdBlocker eine Webseite besucht wird, stirbt in einem Labor ein unschuldiges, niedliches Kaninchen einen grausamen Tod! Zusätzlich werden einige Funktionen dieser Webseite durch den AdBlocker blockiert. Bitte deaktivieren Sie Ihren AdBlocker für diese Webseite und retten Sie unschuldige Kaninchen!
Sie können durch Schliessen dieses Fensters natürlich mit AdBlocker weitermachen - wenn Sie mit dieser Schuld leben können .... es liegt an Ihnen - AdBlocker abschalten und ruhig schlafen können oder mit AdBlocker weitermachen und von übelsten Albträumen gequält werden!
Wir haben Sie gewarnt ....