Subscribe via feed.
Archive for August, 2016

WordPress WP Live Chat Support 6.2.03 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress WP Live Chat plugin version 6.2.03 suffers from a cross site scripting vulnerability.

Car CMS 3.00.30 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Car CMS version 3.00.30 suffers from a cross site scripting vulnerability.

WordPress ALO EasyMail Newsletter 2.9.2 Cross Site Request Forgery

Posted by deepcore under exploit (No Respond)

WordPress ALO EasyMail Newsletter plugin version 2.9.2 suffers from a cross site request forgery vulnerability.

DMA Radius Manager 4.1.5 Cross Site Request Forgery

Posted by deepcore under exploit (No Respond)

DMA Radius Manager versions 4.1.5 and below suffer from a cross site request forgery vulnerability.

mySCADAPro 7 Privilege Escalation

Posted by deepcore under exploit (No Respond)

mySCADAPro version 7 suffers from a local privilege escalation vulnerability.

Halliburton LogView Pro 9.7.5 Crash

Posted by deepcore under exploit (No Respond)

Halliburton LogView Pro version 9.7.5 crash proof of concept exploit.

Guppy CMS 5.01.03 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Guppy CMS version 5.01.03 suffers from a client-side cross site scripting vulnerability.

VUPlayer 2.49 .pls Stack Buffer Overflow

Posted by deepcore under exploit (No Respond)

VUPlayer version 2.49 .pls file stack buffer overflow exploit with DEP bypass.

WinSaber Privilege Escalation

Posted by deepcore under exploit (No Respond)

WinSaber suffers from an unquoted service path privilege escalation vulnerability.

Joomla BreezingForms 1.8.x Shell Upload

Posted by deepcore under exploit (No Respond)

Joomla BreezingForms component version 1.8.x suffers from a remote shell upload vulnerability.