Subscribe via feed.
Archive for November, 2016

My Little Forum 2.3.7 Cross Site Request Forgery / Cross Site Scripting

Posted by deepcore under exploit (No Respond)

My Little Forum version 2.3.7 suffers from backup disclosure, cross site request forgery, and multiple cross site scripting vulnerabilities.

My Little Forum 2.3.7 File Disclosure

Posted by deepcore under exploit (No Respond)

My Little Forum version 2.3.7 suffers from a file disclosure vulnerability.

PCMAN FTP Server 2.0.7 DELETE Buffer Overflow

Posted by deepcore under exploit (No Respond)

PCMAN FTP server version 2.0.7 DELETE command buffer overflow exploit.

Freefloat FTP Server 1.0 HOST Buffer Overflow

Posted by deepcore under exploit (No Respond)

Freefloat FTP server version 1.0 HOST command buffer overflow exploit.

Freefloat FTP Server 1.0 RMD Buffer Overflow

Posted by deepcore under exploit (No Respond)

Freefloat FTP server version 1.0 RMD command buffer overflow exploit.

Freefloat FTP Server 1.0 ABOR Buffer Overflow

Posted by deepcore under exploit (No Respond)

Freefloat FTP server version 1.0 ABOR command buffer overflow exploit.

dotCMS 3.x SQL Injection

Posted by deepcore under exploit (No Respond)

dotCMS versions before 3.5, 3.3.1, and 3.3.2 suffer from multiple remote SQL injection vulnerabilities.

Moodle CMS 3.1.2 Cross Site Scripting / File Upload

Posted by deepcore under exploit (No Respond)

Moodle CMS versions 3.1.2 and below suffer from cross site scripting and file upload vulnerabilities.

KarjaSoft Sami FTP Server 2.0.2 Buffer Overflow

Posted by deepcore under exploit (No Respond)

KarjaSoft Sami FTP server version 2.0.2 USER/PASS remote buffer overflow SEH exploit.

Overlayfs Privilege Escalation

Posted by deepcore under exploit (No Respond)

This Metasploit module attempts to exploit two different CVEs (CVE-2015-1328 and CVE-2015-8660) related to overlayfs.