AVG’s Web Tune extension maliciously works to bypass the Chrome malware checks and leaves broken JavaScript APIs available. The attached exploit steals cookies from avg.com.
>> ARCHIVE: 2015-12
Simple Ads Manager 2.9.4.116 – SQL Injection
DeleGate 9.9.13 – Local Root Vulnerability
FTPShell Client 5.24 – Buffer Overflow
AccessDiver 4.301 – Buffer Overflow
[Turkish] Back To BackDoor
Backshell Web Shell suffers from a cross site request forgery vulnerability.
Bigware Shop version 2.3.01 suffers from cross site scripting and remote file upload vulnerabilities.
EasyCafe Server versions 2.2.14 and below suffer from a remote file read vulnerability.
AccessDiver version 4.301 build 5888 suffers from a buffer overflow vulnerability.