papers

What this paper is This paper details a Local File Inclusion (LFI) vulnerability found in the web interface of NIBE heat pumps. The exploit, written in Python, leverages this vulnerability to read arbitrary files from th

What this paper is This paper details a vulnerability in the web interface of NIBE heat pumps that allows for Remote Code Execution (RCE). The exploit leverages a flaw in how the script handles commands, allowing an atta

What this paper is This paper describes a vulnerability in the component for Joomla! versions prior to 1.5. This vulnerability allows an unauthenticated user to upload arbitrary files, including PHP scripts, to the web s

What this paper is This paper details a vulnerability in the WebMoney Advisor software, specifically its ActiveX control. The vulnerability allows an attacker to cause a Denial of Service (DoS) on a target system by trig

What this paper is This paper details a Local File Inclusion (LFI) vulnerability in version 1.0.6 of the Joomla! component "com graphics". An attacker can exploit this vulnerability to read arbitrary files from the serve

What this paper is This paper details a SQL injection vulnerability found in the "ABC" component (version 1.1.7) for Joomla! websites. The exploit, written in Perl, leverages this vulnerability to extract usernames and p