Subscribe via feed.
Archive for August, 2016

Atutor 2.2.1 Path Traversal

Posted by deepcore under exploit (No Respond)

Atutor version 2.2.1 suffers from a path traversal vulnerability.

zFTP 20061220+dfsg3-4.1 Buffer Overflow

Posted by deepcore under exploit (No Respond)

zFTP client version 20061220+dfsg3-4.1 suffers from a local buffer overflow vulnerability.

Typesettercms v5.0.1 – (Delete Files) CSRF Vulnerability

Posted by deepcore under exploit (No Respond)

No abstract description available in the upcomings!

WordPress All-In-One Security / Firewall 4.1.2 CAPTCHA Bypass

Posted by deepcore under exploit (No Respond)

WordPress All-In-On Security and Firewall plugin version 4.1.2 suffers from multiple CAPTCHA bypass vulnerabilities.

Huawei eSpace IAD Information Disclosure

Posted by deepcore under exploit (No Respond)

Huawei eSpace IAD suffers from an information disclosure vulnerability.

WordPress Contact Bank 2.1.21 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Contact Bank plugin version 2.1.21 suffers from a cross site scripting vulnerability.

WordPress Booking Calendar 6.2 SQL Injection

Posted by deepcore under exploit (No Respond)

WordPress Booking Calendar plugin version 6.2 suffers from a remote SQL injection vulnerability.

WordPress Insert PHP 1.3 Code Execution

Posted by deepcore under exploit (No Respond)

WordPress Insert PHP plugin version 1.3 suffers from an arbitrary PHP code execution vulnerability.

WordPress Booking Calendar 6.2.1 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Booking Calendar plugin version 6.2.1 suffers from a cross site request forgery vulnerability.

WordPress Easy Testimonials 1.36.1 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Easy Testimonials plugin version 1.36.1 suffers from a persistent cross site scripting vulnerability.