Page 24 - Exploit Title News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Exploit Title: ProjeQtOr Project Management System 10.3.2 -Remote Code Execution (RCE)Application: ProjeQtOr Project Management SystemVersion: 10.3.2Bugs: Remote Code Execution (RCE) (Authenticated) via file uploadTechnology: PHPVendor URL: https://www.projeqtor.orgSoftware Link: https://sourceforge.net/projects/projectorria/files/projeqtorV10.3.2.zip/downloadDate of found: 19.04.2023Author: Mirabbas AğalarovTested on: Linux 2. Technical Details & POC========================================Possible including php file with phar extension while uploading image. Rce is triggered when we

# Exploit Title: Franklin Fueling Systems TS-550 - Default Password# Date: 4/16/2023# Exploit Author: parsa rezaie khiabanloo# Vendor Homepage: Franklin Fueling Systems (http://www.franklinfueling.com/)# Version: TS-550# Tested on: Linux/Android(termux)Step 1 : attacker can using these dorks and access to find the panelinurl:"relay_status.html"inurl:"fms_compliance.html"inurl:"fms_alarms.html"inurl:"system_status.html"inurl:"system_reports.html'inurl:"tank_status.html"inurl:"sensor_status.html"inurl:"tank_control.html&q...

# Exploit Title: Bang Resto v1.0 - 'Multiple' SQL Injection# Date: 2023-04-02# Exploit Author: Rahad Chowdhury# Vendor Homepage:https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html# Software Link:https://github.com/mesinkasir/bangresto/archive/refs/heads/main.zip# Version: 1.0# Tested on: Windows 10, PHP 7.4.29, Apache 2.4.53# CVE: CVE-2023-29849*Affected Parameters:*btnMenuItemID, itemID, itemPrice, menuID, staffID, itemPrice, itemID[],itemqty[], btnMenuItemID*Steps to Reproduce:*1. First login your staff panel.2. then go to "order" menu and Select...

# Exploit Title: Bang Resto v1.0 - Stored Cross-Site Scripting (XSS)# Date: 2023-04-02# Exploit Author: Rahad Chowdhury# Vendor Homepage:https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html# Software Link:https://github.com/mesinkasir/bangresto/archive/refs/heads/main.zip# Version: 1.0# Tested on: Windows 10, PHP 7.4.29, Apache 2.4.53# CVE: CVE-2023-29848*Steps to Reproduce:*1. First login to your admin panel.2. then go to Menu section and click add new menu from group.your request data

# Exploit Title: File Replication Pro 7.5.0 - Password disclosure/reset & PrivEsc due Incorrect Access Control# Date: 2023-04-13# Exploit Author: Andrea Intilangelo# Vendor Homepage: http://www.diasoft.net - https://www.filereplicationpro.com# Software Link: http://www.filereplicationpro.com/install/InstData/Windows_64_Bit/VM/frpro.exe# Version: 7.5.0# Tested on: Windows 10 Pro 22H2 x64# CVE: CVE-2023-26918Incorrect file/folder permissions in Diasoft Corporation's File Replication Pro 7.5.0 allow privilege escalation byreplacing a