Subscribe via feed.
Archive for October, 2015

Freemake VideoDownloader 3.7.1 – Code Execution

Posted by deepcore under exploit (No Respond)

An independent vulnerability laboratory researcher discovered a code execution vulnerability in the official FreemakeVideoDownloader v3.7.1 software.

[dos] – Tomabo MP4 Converter 3.10.12 – 3.11.12 (.m3u) Denial of service (Crush application)

Posted by deepcore under Security (No Respond)

Tomabo MP4 Converter 3.10.12 – 3.11.12 (.m3u) Denial of service (Crush application)

Tags: ,

[webapps] – Kallithea 0.2.9 (came_from) HTTP Response Splitting Vulnerability

Posted by deepcore under Security (No Respond)

Kallithea 0.2.9 (came_from) HTTP Response Splitting Vulnerability

Tags: ,

[webapps] – AlienVault OSSIM 4.3 – CSRF Vulnerabilities

Posted by deepcore under Security (No Respond)

AlienVault OSSIM 4.3 – CSRF Vulnerabilities

Tags: ,

Drupal 8.0.0 Beta 14 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Drupal version 8.0.0 Beta 14 suffers from a cross site scripting vulnerability. Drupal’s sad fix was to simply throw an .htaccess file in place to block access to the file.

PayPal Open Redirect

Posted by deepcore under exploit (No Respond)

PayPal suffered from an open redirect vulnerability.

FreeYouTubeToMP3 Converter 4.0.1 Buffer Overflow

Posted by deepcore under exploit (No Respond)

FreeYouTubeToMP3 Converter version 4.0.1 suffers from a buffer overflow vulnerability.

WebComIndia CMS 2015Q4 Authentication Bypass

Posted by deepcore under exploit (No Respond)

WebComIndia CMS 2015Q4 suffers from an authentication bypass vulnerability via remote SQL injection.

VeryPDF Image2PDF Converter SEH Buffer Overflow

Posted by deepcore under exploit (No Respond)

VeryPDF Image2PDF Converter SEH buffer oevrflow exploit that spawns messagebox shellcode.

W150D Wireless N 150 Cross Site Request Forgery

Posted by deepcore under exploit (No Respond)

The W150D Wireless N 150 ADSL2 modem router suffers from a cross site request forgery vulnerability.