Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.3 PACKETSTORM:212664

πŸ“„ Clinic’s Patient Management System 2.0 Remote Code Execution_PACKETSTORM:212664

Clinic's Patient Management System version 2.0 proof of concept that combines SQL injection authentication bypass with an unrestricted file upload ...

N/A N/A PACKETSTORM
HIGH 7.8 PACKETSTORM:212665

iOS 12 / macOS 10.14 voucher_swap Use-After-Free_PACKETSTORM:212665

Proof of concept for an older vulnerability from 2019. A use-after-free vulnerability in Apple's Mach voucher subsystem affects macOS version 10.14...

N/A N/A PACKETSTORM
MEDIUM 6.9 PACKETSTORM:212666

πŸ“„ is-localhost-ip 2.0.0 Restriction Bypass_PACKETSTORM:212666

is-localhost-ip version 2.0.0 suffers from a restriction bypass vulnerability...

N/A N/A PACKETSTORM
NONE PACKETSTORM:212667

πŸ“„ Palo Alto Deep Packet Inspection Information Disclosure_PACKETSTORM:212667

Proof of concept code for Palo Alto deep packet inspection data exfiltration issues that appear to affect PanOS up to version 11.2.0...

N/A N/A PACKETSTORM
HIGH 7.5 PACKETSTORM:212662

πŸ“„ Arista NGFW 17.3.1 Information Disclosure Scanner_PACKETSTORM:212662

This is a proof of concept testing script for an information disclosure vulnerability in Arista NGFW version 17.3.1...

N/A N/A PACKETSTORM
HIGH 7.4 PACKETSTORM:212670

πŸ“„ YOURLS 1.8.2 SQL Injection_PACKETSTORM:212670

Proof of concept for a remote SQL injection vulnerability in YOURLS version 1.8.2...

N/A N/A PACKETSTORM
NONE PACKETSTORM:212672

πŸ“„ Redash Authenticated Remote Command Execution_PACKETSTORM:212672

Redash’s default setup uses PostgreSQL superuser credentials for its primary data source. Because users can run SQL through Redash, any authenticat...

N/A N/A PACKETSTORM
NONE PACKETSTORM:212669

πŸ“„ Zimbra Collaboration Suite Postjournal 10.1.0 Remote Code Execution_PACKETSTORM:212669

Proof of concept for a critical vulnerability exists in the Zimbra Collaboration Suite ZCS PostJournal service that allows attackers to execute arb...

N/A N/A PACKETSTORM
CRITICAL 9.1 PACKETSTORM:212671

πŸ“„ Xorcom CompletePBX 5.2.35 Remote Code Execution_PACKETSTORM:212671

Xorcom CompletePBX suffers from an authenticated command injection vulnerability within the Task Scheduler subsystem. An attacker with valid supera...

N/A N/A PACKETSTORM
NONE PACKETSTORM:212663

πŸ“„ Chromodo Browser 45.8.12.391 Same Origin Policy Weakness_PACKETSTORM:212663

This proof of concept demonstrates message passing between two browser windows when opened under the same logical context same origin. It affect Ch...

N/A N/A PACKETSTORM