Subscribe via feed.
Archive for September, 2014

Apple iOS 7.1.2 Merge Apps Service Local Bypass

Posted by deepcore under Apple (No Respond)

Apple iOS version 7.1.2 suffered from a merge apps service local bypass vulnerability.

Tags: , ,

[web applications] – WordPress Huge-IT Image Gallery 1.0.1 Authenticated SQL Injection

Posted by deepcore under exploit (No Respond)

[shellcode] Linux/x86-64 – Bind TCP Password (hell) /bin/sh Shell (4444/TCP) Shellcode (147 bytes)

Posted by deepcore under Security (No Respond)

Linux/x86-64 – Bind TCP Password (hell) /bin/sh Shell (4444/TCP) Shellcode (147 bytes)

Tags: ,

[webapps] – vBulletin 4.0.x – 4.1.2 (search.php, cat param) – SQL Injection Exploit

Posted by deepcore under Security (No Respond)

vBulletin 4.0.x – 4.1.2 (search.php, cat param) – SQL Injection Exploit

Tags: ,

[web applications] – ManageEngine EventLog Analyzer Multiple Vulnerabilities

Posted by deepcore under exploit (No Respond)

[web applications] – WordPress Slideshow Gallery Plugin 1.4.6 – Shell Upload Vulnerability

Posted by deepcore under exploit (No Respond)

[web applications] – Arachni Web Application Scanner Web UI – Stored XSS Vulnerability

Posted by deepcore under exploit (No Respond)

[web applications] – WordPress CuckooTap Theme & eShop Arbitrary File Download

Posted by deepcore under exploit (No Respond)

[web applications] – ManageEngine Desktop Central – Arbitrary File Upload / RCE Vulnerabilities

Posted by deepcore under exploit (No Respond)

[web applications] – WordPress FR0_theme theme Arbitrary File Download Vulnerability

Posted by deepcore under exploit (No Respond)