Detik News- Exploit DB
- [webapps] Client Management System 1.1 - 'cname' Stored Cross-site scripting (XSS) August 4, 2021Client Management System 1.1 - 'cname' Stored Cross-site scripting (XSS)
- [webapps] WordPress Plugin WP Customize Login 1.1 - 'Change Logo Title' Stored Cross-Site Scripting (XSS) August 4, 2021WordPress Plugin WP Customize Login 1.1 - 'Change Logo Title' Stored Cross-Site Scripting (XSS)
- [webapps] qdPM 9.1 - Remote Code Execution (RCE) (Authenticated) August 4, 2021qdPM 9.1 - Remote Code Execution (RCE) (Authenticated)
- [webapps] qdPM 9.2 - DB Connection String and Password Exposure (Unauthenticated) August 4, 2021qdPM 9.2 - DB Connection String and Password Exposure (Unauthenticated)
- [webapps] ApacheOfBiz 17.12.01 - Remote Command Execution (RCE) via Unsafe Deserialization of XMLRPC arguments August 4, 2021ApacheOfBiz 17.12.01 - Remote Command Execution (RCE) via Unsafe Deserialization of XMLRPC arguments
- [webapps] Hotel Management System 1.0 - Cross-Site Scripting (XSS) Arbitrary File Upload Remote Code Execution (RCE) August 3, 2021Hotel Management System 1.0 - Cross-Site Scripting (XSS) Arbitrary File Upload Remote Code Execution (RCE)
- [webapps] Men Salon Management System 1.0 - SQL Injection Authentication Bypass August 2, 2021Men Salon Management System 1.0 - SQL Injection Authentication Bypass
- [remote] Neo4j 3.4.18 - RMI based Remote Code Execution (RCE) August 2, 2021Neo4j 3.4.18 - RMI based Remote Code Execution (RCE)
- [webapps] Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS) August 2, 2021Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS)
- [webapps] Panasonic Sanyo CCTV Network Camera 2.03-0x - 'Disable Authentication / Change Password' CSRF August 2, 2021Panasonic Sanyo CCTV Network Camera 2.03-0x - 'Disable Authentication / Change Password' CSRF
- [webapps] Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download July 29, 2021Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download
- [webapps] Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection July 29, 2021Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection
- [webapps] CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE) July 29, 2021CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE)
- [webapps] Oracle Fatwire 6.3 - Multiple Vulnerabilities July 29, 2021Oracle Fatwire 6.3 - Multiple Vulnerabilities
- [webapps] Denver IP Camera SHO-110 - Unauthenticated Snapshot July 29, 2021Denver IP Camera SHO-110 - Unauthenticated Snapshot
- [webapps] Client Management System 1.1 - 'cname' Stored Cross-site scripting (XSS) August 4, 2021
Tag Archives: hypervm 0day
Sticky: 0day exploit HyperVM KLoxo
Informasi 0day exploit kembali muncul di permukaan dan sangat memukul webhosting provider, terutama yang menggunakan HyperVM – LXadmin (KLoxo) sebagai control panel. Dari hasil diskusi di WHT, beberapa provider yang kena imbas 0day exploit mengaku bahwa, mereka sudah melakukan patch … Continue reading