Page 8 - Software Link News Today : Breaking News, Live Updates & Top Stories | Vimarsana

---------------------------------------------------------------------------CrafterCMS

# Exploit Title: Credit Lite 1.5.4 - SQL Injection# Exploit Author: CraCkEr# Date: 31/07/2023# Vendor: Hobby-Tech# Vendor Homepage: https://codecanyon.net/item/credit-lite-micro-credit-solutions/39554392# Software Link: https://credit-lite.appshat.xyz/# Tested on: Windows 10 Pro# Impact: Database Access# CVE: CVE-2023-4407# CWE: CWE-89 - CWE-74 - CWE-707## DescriptionSQL injection attacks can allow unauthorized access to sensitive data, modification ofdata and crash the application or

# Exploit Title: Hyip Rio 2.1 - Arbitrary File Upload# Exploit Author: CraCkEr# Date: 30/07/2023# Vendor: tdevs# Vendor Homepage: https://tdevs.co/# Software Link: https://hyiprio-feature.tdevs.co/# Tested on: Windows 10 Pro# Impact: Allows User to upload files to the web server# CVE: CVE-2023-4382## DescriptionAllows Attacker to upload malicious files onto the server, such as Stored XSS## Steps to

# Exploit Title: Pyro CMS 3.9 - Server-Side Template Injection (SSTI) (Authenticated)# Exploit Author: Daniel Barros (@cupc4k3d) - Hakai Offensive Security# Date: 03/08/2023# Vendor: https://pyrocms.com/# Software Link: https://pyrocms.com/documentation/pyrocms/3.9/getting-started/installation# Vulnerable Version(s): 3.9# CVE: CVE-2023-29689# Notes: You need a user who has access to /admin privilege# Example Usage:# First, run the script: python3 CVE-2023-29689.py# Please follow these

# Exploit Title: PHPJabbers Vacation Rental Script 4.0 - CSRF# Date: 05/08/2023# Exploit Author: Hasan Ali YILDIR# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/vacation-rental-script/# Version: 4.0# Tested on: Windows 10 Pro## DescriptionThe attacker can send to victim a link containing a malicious URL in an email or instant messagecan perform a wide variety of actions, such