Subscribe via feed.
Archive for July, 2016

RS232-NET Converter (JTC-200) CSRF / Weak Credentials / Unauthenticated Access

Posted by deepcore under exploit (No Respond)

RS232-NET Converter (JTC-200) suffers from cross site request forgery and weak credential management vulnerabilities along with unauthenticated access over telnet.

AWBS 2.9.6 SQL Injection / Cross Site Scripting

Posted by deepcore under exploit (No Respond)

AWBS version 2.9.6 suffers from remote SQL injection and cross site scripting vulnerabilities.

GNU Wget Arbitrary File Upload / Potential Remote Code Execution

Posted by deepcore under exploit (No Respond)

GNU Wget versions prior to 1.18 suffer from an arbitrary file upload vulnerability that may allow for remote code execution.

[local] – VUPlayer 2.49 – .m3u Buffer Overflow Exploit (Win 7 DEP Bypass)

Posted by deepcore under Security (No Respond)

VUPlayer 2.49 – .m3u Buffer Overflow Exploit (Win 7 DEP Bypass)

Tags: ,

[dos] – Core FTP LE 2.2 – Path Field Local Buffer Overflow

Posted by deepcore under Security (No Respond)

Core FTP LE 2.2 – Path Field Local Buffer Overflow

Tags: ,

Teampass 2.1.26 – Authenticated File Upload Vulnerability

Posted by deepcore under exploit (No Respond)

No abstract description available in the upcomings!

BMW – (Token) Client Side Cross Site Scripting Vulnerability

Posted by deepcore under exploit (No Respond)

No abstract description available in the upcomings!

Micron CMS v5.3 – (cat_id) SQL Injection Vulnerability

Posted by deepcore under exploit (No Respond)

No abstract description available in the upcomings!

Putty Beta 0.67 DLL Hijacking

Posted by deepcore under exploit (No Respond)

Putty version Beta 0.67 suffers from a DLL hijacking vulnerability.

SQLite Tempdir Selection

Posted by deepcore under exploit (No Respond)

Usually processes writing to temporary directories do not need to perform readdir() because they control the filenames they create, so setting /tmp/ , /var/tmp/ , etc. to be mode 1733 is a not uncommon UNIX hardening practice. Affected versions of SQLite reject potential tempdir locations if they are not readable, falling back to ‘.’. Thus, […]