Categoria: Segurança da Informação

Express Invoice 7.12 – ‘Customer’ Persistent Cross-Site Scripting # Exploit Title: Fatura expressa 7.12 – Script entre sites persistente do ‘cliente’ # Exploit Autor: Debashis

Ajenti 2.1.31 – Remote Code Execution # Title: Ajenti 2.1.31 – Remote Code Execution # Author: Jeremy Brown # Date: 2019-10-13 # Software Link: https://github.com/ajenti/ajenti

  Kirona-DRS 5.5.3.5 – Information Disclosure # Título da exploração: Kirona-DRS 5.5.3.5 – Divulgação de informações # Data de descoberta: 2019-10-03 # Pesquisa Shodan: /opt-portal/pages/login.xhtml

Podman & Varlink 1.5.1 – Remote Code Execution # Exploit Title: Podman & Varlink 1.5.1 – Execução remota de código # Exploit Autor: Jeremy Brown

Bolt CMS 3.6.10 – Cross-Site Request Forgery # Exploit Title: Bolt CMS 3.6.10 – Cross-Site Request Forgery # Date: 2019-10-15 # Exploit Author: r3m0t3nu11[Zero-Way] #

Sudo 1.8.27 – Security Bypass # Exploit Title : sudo 1.8.27 – Security Bypass # Date : 2019-10-15 # Original Author: Joe Vennix # Exploit

ActiveFax Server 6.92 Build 0316 – ‘ActiveFaxServiceNT’ Unquoted Service Path # Exploit Title : ActiveFax Server 6.92 Build 0316 – ‘ActiveFaxServiceNT’ Unquoted Service Path #

# Lavasoft 2.3.4.7 – ‘LavasoftTcpService’ Unquoted Service Path # Author: Luis MedinaL # Date: 2019-10-15 # Vendor Homepage: https://www.adaware.com/ # Software Link : https://www.adaware.com/antivirus #

Accounts Accounting 7.02 – Persistent Cross-Site Scripting # Exploit Title: Contabilidade de contas expressas 7.02 – Script persistente entre sites # Exploit Autor: Debashis Pal

Zilab Remote Console Server 3.2.9 – ‘zrcs’ Unquoted Service Path # Exploit Title : Zilab Remote Console Server 3.2.9 – ‘zrcs’ Unquoted Service Path #