Subscribe via feed.
Archive for January, 2017

Bit Defender #39 – Auth Token Bypass Vulnerability

Posted by deepcore under exploit (No Respond)

An independent vulnerability laboratory researcher discovered a remote session token bypass vulnerability in the officia…

Blackboard LMS 9.1 SP14 – (Profile) Persistent Vulnerability

Posted by deepcore under exploit (No Respond)

The vulnerability laboratory core research team discovered an application-side input validation vulnerability in the off…

Boxoft Wav v1.1.0.0 – Buffer Overflow Vulnerability

Posted by deepcore under exploit (No Respond)

The vulnerability laboratory core research team discovered a local buffer overflow vulnerability in the official Boxoft …

[papers] Analysis of sys_dynlib_prepare_dlclose PS4 kernel heap overflow

Posted by deepcore under Security (No Respond)

Analysis of sys_dynlib_prepare_dlclose PS4 kernel heap overflow

Tags: ,

[papers] Hacking the PS4, part 1 – Introduction to PS4's security, and userland ROP

Posted by deepcore under Security (No Respond)

Hacking the PS4, part 1 – Introduction to PS4’s security, and userland ROP

Tags: ,

http://kamphaengphet.cdd.go.th

Posted by deepcore under defacement (No Respond)

http://kamphaengphet.cdd.go.th notified by d0rk_f19h73r

Tags:

http://www.nongraweangphimai.go.th/jic.html

Posted by deepcore under defacement (No Respond)

http://www.nongraweangphimai.go.th/jic.html notified by d0rk_f19h73r

Tags:

Intuit QuickBooks Desktop 2017 Credential Disclosure

Posted by deepcore under exploit (No Respond)

Intuit QuickBooks Desktop 2017 suffers from an administrative credential disclosure vulnerability.

Android max86902 Driver Race Condition

Posted by deepcore under exploit (No Respond)

Android suffers from a race condition in the max86902 driver sysfs interfaces.

Microsoft Edge chakra.dll Information Leak / Type Confusion

Posted by deepcore under exploit (No Respond)

Proof of concept exploit for Microsoft Edge bugs that allow for remote code execution.