TP-Link C2 / C20i Command Injection / Denial Of Service
Posted by deepcore under exploit (No Respond)
TP-Link CS and C20i are vulnerable to command injection, denial of service, and improper firewall rule issues.
Archive for February, 2017
Apache OpenOffice Text Document Malicious Macro Execution
Posted by deepcore under exploit (No Respond)
This Metasploit module generates an Apache OpenOffice Text Document with a malicious macro in it. To exploit successfully, the targeted user must adjust the security level in Macro Security to either Medium or Low. If set to Medium, a prompt is presented to the user to enable or disable the macro. If set to Low, […]
Visual Link Sharing Websites Builder Script 2.1.0 SQL Injection
Posted by deepcore under exploit (No Respond)
Visual Link Sharing Websites Builder Script version 2.1.0 suffers from a remote SQL injection vulnerability.
Multi Outlets POS 3.1 SQL Injection
Posted by deepcore under exploit (No Respond)
Multi Outlets POS version 3.1 suffers from a remote SQL injection vulnerability.
Muviko Video CMS SQL Injection
Posted by deepcore under exploit (No Respond)
Muviko Video CMS suffers from a remote SQL injection vulnerability.
Clone Script Directory Script 1.1.0 SQL Injection
Posted by deepcore under exploit (No Respond)
Clone Script Directory Script version 1.1.0 suffers from a remote SQL injection vulnerability.
JUNG Smart Visu Server 1.0.8x Path Traversal / Backdoor Accounts
Posted by deepcore under exploit (No Respond)
JUNG Smart Visu server with firmware versions 1.0.804, 1.0.830, and 1.0.832 suffer from backdoor account and path traversal vulnerabilities.
Telekom Cloud SSO – Multiple Persistent XSS Vulnerabilities
Posted by deepcore under exploit (No Respond)
The vulnerability laboratory core research team discovered multiple persistent input validation web vulnerabilities in t…
Zoom Player 12.7 / 13 Buffer Overflow
Posted by deepcore under exploit (No Respond)
Zoom Player versions 12.7 and 13 suffer from a .m3u file buffer overflow vulnerability.
HP Printer Improper Access Control
Posted by deepcore under exploit (No Respond)
Hewlett Packard printers suffer from an improper access control via wifi that allows an attacker to obtain unrestricted remote read/write access to the printer configuration using the embedded web server.