jam620

3 exploits Active since Jan 2018
CVE-2022-1040 NOMISEC CRITICAL WRITEUP
Sophos Firewall < 18.5.3 - Unauthenticated Remote Code Execution
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.
17 stars
CVSS 9.8
CVE-2022-27925 NOMISEC HIGH WRITEUP
Zip Path Traversal in Zimbra (mboximport) (CVE-2022-27925)
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.
8 stars
CVSS 7.2
CVE-2017-1000486 NOMISEC CRITICAL WRITEUP
Primefaces Remote Code Execution Exploit
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
CVSS 9.8