Subscribe via feed.
Archive for December, 2015

[dos] – IE 11.0.9600.18097 COmWindowProxy::SwitchMarkup NULL PTR

Posted by deepcore under Security (No Respond)

IE 11.0.9600.18097 COmWindowProxy::SwitchMarkup NULL PTR

Tags: ,

[dos] – MacOS X 10.11 FTS Deep Structure of the File System Buffer Overflow

Posted by deepcore under Security (No Respond)

MacOS X 10.11 FTS Deep Structure of the File System Buffer Overflow

Tags: ,

[remote] – Microsoft Windows Media Center Library Parsing RCE Vulnerability aka "self-executing" MCL File

Posted by deepcore under Security (No Respond)

Microsoft Windows Media Center Library Parsing RCE Vulnerability aka “self-executing” MCL File

Tags: ,

Property Castle 15 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Property Castle version 15 suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data.

GoAutoDial CE 3.3 SQL Injection / Command Injection

Posted by deepcore under exploit (No Respond)

GoAutoDial CE version 3.3 remote command execution and SQL injection vulnerabilities.

ASP Dynamika 2.5 File Upload / SQL Injection

Posted by deepcore under exploit (No Respond)

ASP Dynamika version 2.5 suffers from arbitrary file upload and remote SQL injection vulnerabilities.

Download Manager 1.1 SQL Injection / Disclosure

Posted by deepcore under exploit (No Respond)

Download Manager version 1.1 suffers from backup disclosure and remote SQL injection vulnerabilities.

Awesome Media Gallery 1.0 Directory Traversal

Posted by deepcore under exploit (No Respond)

Awesome Media Gallery version 1.0 suffers from a directory traversal vulnerability.

ffmpeg Video Converter 2.0 Pro Shell Upload

Posted by deepcore under exploit (No Respond)

ffmpeg Video Converter version 2.0 Pro suffers from a remote shell upload vulnerability.

DZOIC ClipHouse 11.1 SQL Injection / Clickjacking

Posted by deepcore under exploit (No Respond)

DZOIC ClipHouse version 11.1 suffers from remote SQL injection and clickjacking vulnerabilities.