[local] – Dropbox Desktop Client 9.4.49 (64bit) – Local Credentials Disclosure
Posted by deepcore under Security (No Respond)
Archive for September, 2016
[remote] – Apache/mod_ssl OpenSSL < 0.9.6d / < 0.9.7-beta2 – 'openssl-too-open.c' SSL2 KEY_ARG Overflow Exploit
Posted by deepcore under Security (No Respond)
Apache/mod_ssl OpenSSL < 0.9.6d / < 0.9.7-beta2 – 'openssl-too-open.c' SSL2 KEY_ARG Overflow Exploit
Tags: 0day, remote exploitFacebook Parse – HTTP Host Header Attack Redirect
Posted by deepcore under exploit (No Respond)
No abstract description available in the upcomings!
http://www.nongkhonthai.go.th
Posted by deepcore under defacement (No Respond)
http://www.nongkhonthai.go.th notified by JoOker
Tags: defacementBSNL Teracom Router Firmware Rewrite / Link Modification
Posted by deepcore under exploit (No Respond)
BSNL Teracom routers suffer from a firmware rewrite via unrestricted file upload issue and a link modification issue.
WordPress RB Agency 2.4.7 File Disclosure
Posted by deepcore under exploit (No Respond)
WordPress RB Agency plugin version 2.4.7 suffers from a file disclosure vulnerability.
Belkin F9K1122v1 1.00.30 Buffer Overflow / Cross Site Request Forgery
Posted by deepcore under exploit (No Respond)
Belkin F9K1122v1 version 1.00.30 suffers from a buffer overflow vulnerability that can be leveraged via cross site request forgery.
ArcServe UDP 6.0.3792 Update 2 Build 516 Privilege Escalation
Posted by deepcore under exploit (No Respond)
ArcServe UDP version 6.0.3792 Update 2 Build 516 suffers from an unquoted service path privilege escalation vulnerability.
Android 6.0.0 MDA89E / 6.0.1 MMB29V OEM Panic
Posted by deepcore under exploit (No Respond)
Android versions 6.0.0 MDA89E through 6.0.1 MMB29V suffers from a fastboot oem panic that causes the bootloader to expose a serial-over-USB connection, which would allow an attacker to obtain a full memory dump of the device using tools such as QPST Configuration.
Fortinet Firewall EGREGIOUSBLUNDER Checker
Posted by deepcore under exploit (No Respond)
This is a tool to check if a Fortinet Firewall is susceptible to the EGREGIOUSBLUNDER exploit.