Subscribe via feed.
Archive for July, 2016

[remote] – Barracuda Web App Firewall 8.0.1.008/Load Balancer 5.4.0.004 – Post Auth Remote Root Exploit (Metasploit) (3)

Posted by deepcore under Security (No Respond)

Barracuda Web App Firewall 8.0.1.008/Load Balancer 5.4.0.004 – Post Auth Remote Root Exploit (Metasploit) (3)

Tags: ,

[webapps] – WordPress Ultimate Product Catalog 3.9.8 – (do_shortcode via ajax) Blind SQL Injection

Posted by deepcore under Security (No Respond)

WordPress Ultimate Product Catalog 3.9.8 – (do_shortcode via ajax) Blind SQL Injection

Tags: ,

[webapps] – AXIS Multiple Products – Authenticated Remote Command Execution via devtools Vector

Posted by deepcore under Security (No Respond)

AXIS Multiple Products – Authenticated Remote Command Execution via devtools Vector

Tags: ,

[local] – VUPlayer 2.49 – (.pls) Stack Buffer Overflow (DEP Bypass)

Posted by deepcore under Security (No Respond)

VUPlayer 2.49 – (.pls) Stack Buffer Overflow (DEP Bypass)

Tags: ,

[local] – mySCADAPro 7 – Local Privilege Escalation

Posted by deepcore under Security (No Respond)

mySCADAPro 7 – Local Privilege Escalation

Tags: ,

ZMS v3.2 CMS – Client Side Cross Site Web Vulnerabilities

Posted by deepcore under exploit (No Respond)

No abstract description available in the upcomings!

MediaCoder 0.8.45 – Buffer Overflow Vulnerability

Posted by deepcore under exploit (No Respond)

No abstract description available in the upcomings!

http://egif.mict.go.th/iregis/

Posted by deepcore under defacement (No Respond)

http://egif.mict.go.th/iregis/ notified by PiLyO

Tags:

Dropbox 6.4.14 DLL Hijacking

Posted by deepcore under exploit (No Respond)

Dropbox version 6.4.14 has an installer that suffers from a dll hijacking vulnerability.

Barracuda Web App Firewall/Load Balancer Post Auth Remote Root Exploit (2)

Posted by deepcore under exploit (No Respond)

This Metasploit module exploits a remote command execution vulnerability in the Barracuda Web App Firewall Firmware Version <= 8.0.1.007 and Load Balancer Firmware <= v5.4.0.004 by exploiting a two vulnerabilities in the web administration interface. The first bug leverages a Arbitrary File Upload vulnerability to create a malicious file containing shell commands before using a […]