Detik News- Exploit DB
- [webapps] i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS) October 15, 2021i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)
- [local] SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path October 14, 2021SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path
- [webapps] TextPattern CMS 4.8.7 - Remote Command Execution (RCE) (Authenticated) October 14, 2021TextPattern CMS 4.8.7 - Remote Command Execution (RCE) (Authenticated)
- [webapps] Company's Recruitment Management System 1.0 - 'Multiple' SQL Injection (Unauthenticated) October 13, 2021Company's Recruitment Management System 1.0 - 'Multiple' SQL Injection (Unauthenticated)
- [webapps] Apache HTTP Server 2.4.50 - Path Traversal & Remote Code Execution (RCE) October 13, 2021Apache HTTP Server 2.4.50 - Path Traversal & Remote Code Execution (RCE)
- [remote] Cypress Solutions CTM-200/CTM-ONE - Hard-coded Credentials Remote Root (Telnet/SSH) October 13, 2021Cypress Solutions CTM-200/CTM-ONE - Hard-coded Credentials Remote Root (Telnet/SSH)
- [remote] Cypress Solutions CTM-200 2.7.1 - Root Remote OS Command Injection October 13, 2021Cypress Solutions CTM-200 2.7.1 - Root Remote OS Command Injection
- [webapps] Pharmacy Point of Sale System 1.0 - 'Add New User' Cross-Site Request Forgery (CSRF) October 13, 2021Pharmacy Point of Sale System 1.0 - 'Add New User' Cross-Site Request Forgery (CSRF)
- [webapps] Online Learning System 2.0 - 'Multiple' SQLi Authentication Bypass October 13, 2021Online Learning System 2.0 - 'Multiple' SQLi Authentication Bypass
- [webapps] Simple Issue Tracker System 1.0 - SQLi Authentication Bypass October 13, 2021Simple Issue Tracker System 1.0 - SQLi Authentication Bypass
- [webapps] Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting (XSS) October 13, 2021Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting (XSS)
- [webapps] Logitech Media Server 8.2.0 - 'Title' Cross-Site Scripting (XSS) October 13, 2021Logitech Media Server 8.2.0 - 'Title' Cross-Site Scripting (XSS)
- [webapps] Sonicwall SonicOS 7.0 - Host Header Injection October 13, 2021Sonicwall SonicOS 7.0 - Host Header Injection
- [webapps] Simple Payroll System 1.0 - SQLi Authentication Bypass October 13, 2021Simple Payroll System 1.0 - SQLi Authentication Bypass
- [webapps] Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated) October 13, 2021Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated)
- [webapps] i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS) October 15, 2021
Category Archives: Tips and Tricks
Menonaktifkan Open DNS Server BIND
Beberapa waktu lalu, tim abuse dari salah satu penyedia VPS (Virtual Private Server) yang saya gunakan meneruskan email komplain ke saya terkait dengan digunakannya server VPS saya sebagai reflektor serangan DDoS ke server di Eropa. Setelah saya cek, ternyata ada … Continue reading
Posted in IT, Security, Tips and Tricks
Leave a comment
Ngeblog mobile
Mengingat jarang di depan pc untuk update blog, maka diputuskan menginstall wordpress for blackberry. Happy blogging.
[Fix]Joomla JHTMLGrid Error
Seorang rekan saya mengirimkan bbm bahwa situs portal berita yang berbasis joomla tiba-tiba memunculkan error di halaman Administrator. Error tersebut terjadi saat mengakses Article Manager dari Site Manager. Adapun pesan error tersebut adalah: Warning: Parameter 1 to JHTMLGrid::access() expected to … Continue reading
Posted in IT, Tips and Tricks
Leave a comment
[Fix] New guest xen IP could not reach
Kejadian ini baru pertama kali saya alami, dimana saat saya menginstall OS guest baru di virtualisasi XEN, ternyata IP yang saya assign untuk OS guest tersebut tidak bisa diping. Saya coba console OS guest tersebut melalui dom0 dan memastikan bahwa … Continue reading
Posted in IT, SysAdmin, Tips and Tricks
Leave a comment
Fixing dot name file in wordpress
Sore ini baru sadar kalau ada rules di .htaccess blog saya yang tidak mengijinkan membuka file dengan nama yang dimulai dengan . (titik). Padahal selama ini (sebelum dilakukan perubahan .htaccess) semua images yang ada di postingan blog saya otomatis generate … Continue reading
Posted in IT, SysAdmin, Tips and Tricks
Leave a comment