-
AROX School-ERP Pro Unauthenticated Remote Code Execution
PHP Files ≈ Packet Storm Jun 17, 2019 | 19:06 pmThis Metasploit module exploits a command execution vulnerability in AROX School-ERP. "import_stud.php" and "upload_fille.php" do not have session control. Session start/check functions in Line 8,9,10 are disabled with slashes. Therefore an unauthenticated user can execute the command on the system.
Read more... -
WebLord WL-Nuke Coppermine For PHP-Nuke 1.3.1c SQL Injection
PHP Files ≈ Packet Storm Jun 13, 2019 | 21:22 pmWebLord WL-Nuke Coppermine for PHP-Nuke version 1.3.1c suffers from a remote SQL injection vulnerability.
Read more... -
Ubuntu Security Notice USN-4009-2
PHP Files ≈ Packet Storm Jun 5, 2019 | 22:32 pmUbuntu Security Notice 4009-2 - USN-4009-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. It was discovered that PHP incorrectly decoding certain MIME headers. A remote attacker could possibly[…]
Read more... -
Ubuntu Security Notice USN-4009-1
PHP Files ≈ Packet Storm Jun 5, 2019 | 19:44 pmUbuntu Security Notice 4009-1 - It was discovered that PHP incorrectly handled certain exif tags in images. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly obtain sensitive information.[…]
Read more... -
LibreNMS addhost Command Injection
PHP Files ≈ Packet Storm Jun 4, 2019 | 23:07 pmThis Metasploit module exploits a command injection vulnerability in the open source network management software known as LibreNMS. The community parameter used in a POST request to the addhost functionality is unsanitized. This parameter is later used as part of[…]
Read more... -
Interspire Email Marketer 6.20 Remote Code Execution
PHP Files ≈ Packet Storm May 23, 2019 | 17:08 pmInterspire Email Marketer version 6.20 suffers from a remote code execution vulnerability in surveys_submit.php.
Read more... -
Ubuntu Security Notice USN-3566-2
PHP Files ≈ Packet Storm May 22, 2019 | 16:39 pmUbuntu Security Notice 3566-2 - USN-3566-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this[…]
Read more... -
Shopware createInstanceFromNamedArguments PHP Object Instantiation
PHP Files ≈ Packet Storm May 22, 2019 | 02:48 amThis Metasploit module exploits a php object instantiation vulnerability that can lead to remote code execution in Shopware. An authenticated backend user could exploit the vulnerability. The vulnerability exists in the createInstanceFromNamedArguments function, where the code insufficiently performs whitelist check[…]
Read more... -
PHP PHP_INI_SYSTEM Ineffective Controls
PHP Files ≈ Packet Storm May 21, 2019 | 22:22 pmSecurity controls configured via php.ini directives at the PHP_INI_SYSTEM level are ineffective as they could be bypassed by malicious scripts via writing their own process memory on the Linux platform. Proof of concept code included.
Read more... -
Schneider Electric U.Motion Builder 1.3.4 Command Injection
PHP Files ≈ Packet Storm May 14, 2019 | 16:05 pmSchneider Electric U.Motion Builder version 1.3.4 suffers from an unauthenticated command injection vulnerability in track_import_export.php.
Read more...
Jedesmal, wenn mit eingeschaltetem AdBlocker eine Webseite besucht wird, stirbt in einem Labor ein unschuldiges, niedliches Kaninchen einen grausamen Tod! Zusätzlich werden einige Funktionen dieser Webseite durch den AdBlocker blockiert. Bitte deaktivieren Sie Ihren AdBlocker für diese Webseite und retten Sie unschuldige Kaninchen!
Sie können durch Schliessen dieses Fensters natürlich mit AdBlocker weitermachen - wenn Sie mit dieser Schuld leben können .... es liegt an Ihnen - AdBlocker abschalten und ruhig schlafen können oder mit AdBlocker weitermachen und von übelsten Albträumen gequält werden!
Wir haben Sie gewarnt ....