AVG WebTune Hijacking

AVG’s Web Tune extension maliciously works to bypass the Chrome malware checks and leaves broken JavaScript APIs available. The attached exploit steals cookies from avg.com.

[webapps] – Simple Ads Manager 2.9.4.116 – SQL Injection

Simple Ads Manager 2.9.4.116 – SQL Injection

[local] – DeleGate 9.9.13 – Local Root Vulnerability

DeleGate 9.9.13 – Local Root Vulnerability

[local] – FTPShell Client 5.24 – Buffer Overflow

FTPShell Client 5.24 – Buffer Overflow

[dos] – AccessDiver 4.301 – Buffer Overflow

AccessDiver 4.301 – Buffer Overflow

[papers] – [Turkish] Back To BackDoor

[Turkish] Back To BackDoor

Backshell Web Shell Cross Site Request Forgery

Backshell Web Shell suffers from a cross site request forgery vulnerability.

Bigware Shop 2.3.01 Cross Site Scripting / File Upload

Bigware Shop version 2.3.01 suffers from cross site scripting and remote file upload vulnerabilities.

EasyCafe Server 2.2.14 Remote File Read

EasyCafe Server versions 2.2.14 and below suffer from a remote file read vulnerability.

AccessDiver 4.301 Build 5888 Buffer Overflow

AccessDiver version 4.301 build 5888 suffers from a buffer overflow vulnerability.