Subscribe via feed.
Archive for October, 2016

Contenido v4.9.11 – (Backend) Multiple XSS Vulnerabilities

Posted by deepcore under exploit (No Respond)

The vulnerability laboratory core research team discovered multiple client-side cross site scripting vulnerabilities in …

http://oranuch.nsdv.go.th/gallery/images/014233101016b5s2k.png

Posted by deepcore under defacement (No Respond)

http://oranuch.nsdv.go.th/gallery/images/014233101016b5s2k.png notified by N3X0000S

Tags:

http://sudsai.nsdv.go.th/gallery/images/0144181010166fcj4.png

Posted by deepcore under defacement (No Respond)

http://sudsai.nsdv.go.th/gallery/images/0144181010166fcj4.png notified by N3X0000S

Tags:

http://witya.nsdv.go.th/gallery/images/014620101016y9167.png

Posted by deepcore under defacement (No Respond)

http://witya.nsdv.go.th/gallery/images/014620101016y9167.png notified by N3X0000S

Tags:

Online Hotel Booking System Pro 1.2 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Online Hotel Booking System Pro version 1.2 suffers from a cross site scripting vulnerability.

Forbiz Infoway CMS File Upload / Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Forbiz Infoway CMS suffers from cross site scripting and remote file upload vulnerabilities.

Zenario ProBusiness 7.3.0.37342 Backup Disclosure

Posted by deepcore under exploit (No Respond)

Zenario ProBusiness version 7.3.0.37342 suffers from a backup disclosure vulnerability.

Exagate WEBPack Management System SQL Injection / Information Disclosure

Posted by deepcore under exploit (No Respond)

Exagate WEBPack Management System suffers from remote SQL injection and information disclosure vulnerabilities.

Simple PHP Blog 0.8.4 Cross Site Request Forgery

Posted by deepcore under exploit (No Respond)

Simple PHP Blog version 0.8.4 suffers from a cross site request forgery vulnerability.

BlueStacks 2.5.55 Privilege Escalation

Posted by deepcore under exploit (No Respond)

BlueStacks version 2.5.55 suffers from an unquoted service path privilege escalation vulnerability.