Subscribe via feed.
Archive for May, 2017

Secure Auditor 3.0 Directory Traversal

Posted by deepcore under exploit (No Respond)

Secure Auditor version 3.0 suffers from a directory traversal vulnerability.

Pegasus 4.72 Build 572 Remote Code Execution

Posted by deepcore under exploit (No Respond)

Pegasus version 4.72 build 572 suffers from a mailto link remote code execution vulnerability.

Belden GarrettCom 6K / 10KT Bypass / Disclosure / Buffer Overflow

Posted by deepcore under exploit (No Respond)

Belden GarrettCom 6K and 10KT series suffer from suffers from buffer overflow, authentication bypass, information disclosure, and other vulnerabilities.

Kodak InSite 8.0 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Kodak InSite versions 6.5. through 8.0 suffer from a cross site scripting vulnerability.

Ceragon FibeAir IP-10 7.2.0 Hidden User Backdoor

Posted by deepcore under exploit (No Respond)

Ceragon FibeAir IP-10 versions 7.2.0 and below suffer from a hidden user backdoor vulnerability.

Proposed PATCH Act Forces US Snoops To Quit Hoarding Code Exploits

Posted by deepcore under exploit (No Respond)

Microsoft Windows ROTFLAGS_ALLOWANYCLIENT Privilege Escalation

Posted by deepcore under exploit (No Respond)

Microsoft Windows suffers from a running object table register ROTFLAGS_ALLOWANYCLIENT privilege escalation vulnerability.

Oracle PeopleSoft XML External Entity / SYSTEM Remote Code Execution

Posted by deepcore under exploit (No Respond)

Oracle PeopleSoft suffers from an XML external injection vulnerability that allows for SYSTEM remote code execution.

[webapps] Tecnovision DLX Spot – Arbitrary File Upload

Posted by deepcore under Security (No Respond)

Tecnovision DLX Spot – Arbitrary File Upload

Tags: ,

Apple iOS Notifications API Denial Of Service

Posted by deepcore under Apple (No Respond)

Apple iOS versions prior to 10.3.2 suffer from a notifications API denial of service vulnerability.

Tags: , ,