Subscribe via feed.
Archive for March, 2017

USBPcap 1.1.0.0 Privilege Escalation

Posted by deepcore under exploit (No Respond)

USBPcap version 1.1.0.0 suffers from a privilege escalation vulnerability.

WordPress PICA Photo Gallery 1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

WordPress PICA Photo Gallery plugin version 1.0 suffers from a remote SQL injection vulnerability.

Drupal 7.x Module Services Remote Code Execution

Posted by deepcore under exploit (No Respond)

Drupal version 7.x module services remote code execution exploit.

Navetti PricePoint 4.6.0.0 XSS / CSRF / SQL Injection

Posted by deepcore under exploit (No Respond)

Navetti PricePoint version 4.6.0.0 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.

WTServer 17.02 DLL Hijacking

Posted by deepcore under exploit (No Respond)

WTServer version 17.02 suffers from a dll hijacking vulnerability.

FTP Voyager Scheduler 16.2.0 CSRF / Denial Of Service

Posted by deepcore under exploit (No Respond)

FTP Voyager Scheduler version 16.2.0 suffers from cross site request forgery and denial of service vulnerabilities.

SICUNET Access Controller 0.32-05z Code Execution / File Disclosure

Posted by deepcore under exploit (No Respond)

SICUNET Access Controller version 0.32-05z suffers from code execution, file disclosure, lack of software updates, and poor credential handling vulnerabilities.

dnaLIMS Code Execution / XSS / Traversal / Session Hijacking

Posted by deepcore under exploit (No Respond)

dnaLIMS DNA sequencing application suffers from an improperly protected web shell, a directory traversal, insecure password storage, session hijacking, cross site scripting, and improperly protected content vulnerabilities.

http://ppkhosp.go.th

Posted by deepcore under defacement (No Respond)

http://ppkhosp.go.th notified by AnonymousFox

Tags:

Security Flaws 'Undiscovered' For Years

Posted by deepcore under exploit (No Respond)