Proof of concept exploit that allows an attacker to retrieve administrative credentials through SQL injection and ultimately execute arbitrary code on the target server.
e281d48432c2585fa05b2517fffc0171d56091981f896fb78703333f642a73a5Proof of concept remote code execution exploit for Rejetto HTTP File Server (HFS) version 2.3m.
94abc34636ee9d2ee77ab7b6f4f07a3e5915b2c3ea027b41ba855261a1cd204aProof of concept unauthenticated remote code execution exploit for Calibre versions 7.14.0 and below.
8c3200bd22a9201376c309b810720c70e5e01d5f4a8e6a5ec53a060dd8be9202Veeam Backup and Replication version 12.1.2.172 unauthenticated remote code execution exploit.
144b93e970dc795468638040e64be6507385196ebeb695305b8bfbc265bcf2edWhitepaper called Unleashing Worms and Extracting Data: Escalating the Outcome of Attacks against RAG-based Inference in Scale and Severity Using Jailbreaking. In this paper, the authors show that with the ability to jailbreak a GenAI model, attackers can escalate the outcome of attacks against RAG-based GenAI-powered applications in severity and scale.
27bfeb9c59e588b146b6eb3f569fcfb1228d2be7bf7e469574b84bb54bb020c3Debian Linux Security Advisory 5769-1 - Multiple issues were found in Git, a fast, scalable, distributed revision control system, which may result in file overwrites outside the repository, arbitrary configuration injection or arbitrary code execution.
83536dc8a513bc91c3b3400ac06ab789245a973f960faf3d2457de55046bfbb7Red Hat Security Advisory 2024-6667-03 - Red Hat OpenShift Dev Spaces 3.16 has been released.
9ce2855738bef19ae1ae356a495c760b8bfdd56e31bf0e03c7c90d3e729c572fShip Ferry Ticket Reservation System version 1.0 suffers from multiple remote SQL injection vulnerabilities.
aefb5eeb623cfb1e4c92c60d84ce01babb17cb392dd12a995515335011e12235Reservation Management System version 1.0 suffers from a cross site request forgery vulnerability.
73bbdf5b6e54d04cadf49d3f40a3fe4f3376d78a867664173c89ced493a2283cRed Hat Security Advisory 2024-6663-03 - An update for kpatch-patch-4_18_0-305_120_1 and kpatch-patch-4_18_0-305_138_1 is now available for Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Issues addressed include a denial of service vulnerability.
1456354c945b81d6305800d05ea53128d21f935010521a7255622c7402f18970Online Job Recruitment Portal Project version 1.0 suffers from an arbitrary file upload vulnerability.
0b11185c3ea1add14d0fab396e3abc79b89450ee26fe1d4c4eb27856f33193eaRed Hat Security Advisory 2024-6662-03 - An update for python-setuptools is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
5f83bf1f4e1cfd470fd81ba14113e56227cea4b74f7493cf3f3b08a762af42eeIFSC Code Finder Portal version 1.0 suffers from an ignored default credential vulnerability.
4c8714f261d6bcdc7f5ee89b4f1473342ced816a03f174b9a8bc607a329616e0Red Hat Security Advisory 2024-6661-03 - An update for python3-setuptools is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
f0a9092cd682038a888626f1fc3240caae49814f55caa2939cfa5f7df9dae999GYM Management System version 1.0 suffers from an ignored default credential vulnerability.
5ee11f413d4f6dbbb71c2d782424145f8284d96790518d7c0e3923c5bd409844Red Hat Security Advisory 2024-6656-03 - Migration Toolkit for Runtimes 1.2.7 release Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link in the References section. Issues addressed include a cross site scripting vulnerability.
77dc311bde4bddc1413726250c2acc95f9b57a3943c422d928c0945afbb3527fEmergency Ambulance Hiring Portal version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
6cc9519a5a47d6de98282e14b498e5ca4044959e97c7129c7b172fc06c9d0ebaManageEngine DeviceExpert version 5.9.7 build 5970 allows for usernames and salted MD5 password hashes to be disclosed.
3bc56d1f2ac0906c575dbe7a268613e4f69048d7229bf71a151c7a3005dab77dCOVID19 Testing Management System version 1.0 suffers from an ignored default credential vulnerability.
dfa6d3c1b41f7c8e3917b8e4d5def4360450f04e1bb6399bc37f9bced0bec05aBP Monitoring Management System version 1.0 version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
aa30837cf16b6046be2fbcc93cf45d15d653bb896889d1c8eb504254cfc40ad4Auto/Taxi Stand Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
5bfb04fe73b1ba3334cfb80bd85d482d463f62029298535a09ed53c1a5e5c485
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed