Saya cukup kaget melihat ada forecast vulnerability di situs securityfocus.com. Bisa dilihat di screenshoot disamping atau coba klik http://www.securityfocus.com/bid/51273.
Aneh tapi cukup nyata.
Detik News- Exploit DB
- [webapps] Thruk Monitoring Web Interface 3.06 - Path Traversal June 9, 2023Thruk Monitoring Web Interface 3.06 - Path Traversal
- [webapps] WordPress Theme Workreap 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution June 9, 2023WordPress Theme Workreap 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution
- [local] USB Flash Drives Control 4.1.0.0 - Unquoted Service Path June 7, 2023USB Flash Drives Control 4.1.0.0 - Unquoted Service Path
- [local] Macro Expert 4.9 - Unquoted Service Path June 6, 2023Macro Expert 4.9 - Unquoted Service Path
- [webapps] Tree Page View Plugin 1.6.7 - Cross Site Scripting (XSS) June 6, 2023Tree Page View Plugin 1.6.7 - Cross Site Scripting (XSS)
- [webapps] Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI) June 4, 2023Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)
- [webapps] Barebones CMS v2.0.2 - Stored Cross-Site Scripting (XSS) (Authenticated) June 4, 2023Barebones CMS v2.0.2 - Stored Cross-Site Scripting (XSS) (Authenticated)
- [webapps] STARFACE 7.3.0.10 - Authentication with Password Hash Possible June 4, 2023STARFACE 7.3.0.10 - Authentication with Password Hash Possible
- [webapps] MotoCMS Version 3.4.3 - SQL Injection June 4, 2023MotoCMS Version 3.4.3 - SQL Injection
- [webapps] File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE) June 4, 2023File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE)
- [webapps] Total CMS 1.7.4 - Remote Code Execution (RCE) June 4, 2023Total CMS 1.7.4 - Remote Code Execution (RCE)
- [webapps] unilogies/bumsys v1.0.3 beta - Unrestricted File Upload May 31, 2023unilogies/bumsys v1.0.3 beta - Unrestricted File Upload
- [webapps] SCRMS 2023-05-27 1.0 - Multiple SQL Injection May 31, 2023SCRMS 2023-05-27 1.0 - Multiple SQL Injection
- [webapps] Online Security Guards Hiring System 1.0 - Reflected XSS May 31, 2023Online Security Guards Hiring System 1.0 - Reflected XSS
- [remote] Flexense HTTP Server 10.6.24 - Buffer Overflow (DoS) (Metasploit) May 31, 2023Flexense HTTP Server 10.6.24 - Buffer Overflow (DoS) (Metasploit)
- [webapps] Thruk Monitoring Web Interface 3.06 - Path Traversal June 9, 2023