[webapps] – Viart Shopping Cart 5.0 – CSRF Shell Upload
Posted by deepcore under Security (No Respond)
Archive for June, 2016
[webapps] – Joomla PayPlans (com_payplans) Extension 3.3.6 – SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] – Dream Gallery 2.0 – Admin Panel Authentication Bypass
Posted by deepcore under Security (No Respond)
[webapps] – Zabbix 2.2 – 3.0.3 – RCE with API JSON-RPC
Posted by deepcore under Security (No Respond)
[webapps] – FRticket Ticket System – Stored XSS
Posted by deepcore under Security (No Respond)
[local] – iSQL 1.0 – Shell Command Injection
Posted by deepcore under Security (No Respond)
[dos] – iSQL 1.0 – isql_main.c Buffer Overflow PoC
Posted by deepcore under Security (No Respond)
[local] – Easy RM to MP3 Converter 2.7.3.700 – (.m3u) Exploit with Universal DEP+ASLR Bypass
Posted by deepcore under Security (No Respond)
Easy RM to MP3 Converter 2.7.3.700 – (.m3u) Exploit with Universal DEP+ASLR Bypass
Tags: 0day, remote exploithttp://www.diw.go.th
Posted by deepcore under Security (No Respond)
http://www.diw.go.th notified by W.A_666
Tags: defacementArticleSetup 1.00 Cross Site Request Forgery
Posted by deepcore under exploit (No Respond)
ArticleSetup version 1.00 suffers from a cross site request forgery vulnerability.