A letter from sysadmin to developer
Dear developer,
please test your code before shipping. Pretty please take corner cases into account. We know you’re competent enough, don’t be lazy.
Your kind sysadmin
Detik News- Exploit DB
- [local] USB Flash Drives Control 4.1.0.0 - Unquoted Service Path June 7, 2023USB Flash Drives Control 4.1.0.0 - Unquoted Service Path
- [webapps] Tree Page View Plugin 1.6.7 - Cross Site Scripting (XSS) June 6, 2023Tree Page View Plugin 1.6.7 - Cross Site Scripting (XSS)
- [local] Macro Expert 4.9 - Unquoted Service Path June 6, 2023Macro Expert 4.9 - Unquoted Service Path
- [webapps] Total CMS 1.7.4 - Remote Code Execution (RCE) June 4, 2023Total CMS 1.7.4 - Remote Code Execution (RCE)
- [webapps] Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI) June 4, 2023Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)
- [webapps] Barebones CMS v2.0.2 - Stored Cross-Site Scripting (XSS) (Authenticated) June 4, 2023Barebones CMS v2.0.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
- [webapps] STARFACE 7.3.0.10 - Authentication with Password Hash Possible June 4, 2023STARFACE 7.3.0.10 - Authentication with Password Hash Possible
- [webapps] MotoCMS Version 3.4.3 - SQL Injection June 4, 2023MotoCMS Version 3.4.3 - SQL Injection
- [webapps] File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE) June 4, 2023File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE)
- [remote] Flexense HTTP Server 10.6.24 - Buffer Overflow (DoS) (Metasploit) May 31, 2023Flexense HTTP Server 10.6.24 - Buffer Overflow (DoS) (Metasploit)
- [webapps] Online Security Guards Hiring System 1.0 - Reflected XSS May 31, 2023Online Security Guards Hiring System 1.0 - Reflected XSS
- [webapps] Faculty Evaluation System 1.0 - Unauthenticated File Upload May 31, 2023Faculty Evaluation System 1.0 - Unauthenticated File Upload
- [webapps] Pydio Cells 4.1.2 - Cross-Site Scripting (XSS) via File Download May 31, 2023Pydio Cells 4.1.2 - Cross-Site Scripting (XSS) via File Download
- [webapps] Pydio Cells 4.1.2 - Server-Side Request Forgery May 31, 2023Pydio Cells 4.1.2 - Server-Side Request Forgery
- [webapps] Rukovoditel 3.3.1 - CSV injection May 31, 2023Rukovoditel 3.3.1 - CSV injection
- [local] USB Flash Drives Control 4.1.0.0 - Unquoted Service Path June 7, 2023