Bitcoin MLM Software 1.0.2 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Bitcoin MLM Software version 1.0.2 suffers from a persistent cross site scripting vulnerability.
Archive for February, 2018
NetEx HyperIP 6.1.0 Authentication Bypass
Posted by deepcore under exploit (No Respond)
NetEx HyperIP version 6.1.0 suffers from an authentication bypass vulnerability.
NetEx HyperIP 6.1.0 Post-Auth Command Execution
Posted by deepcore under exploit (No Respond)
NetEx HyperIP version 6.1.0 suffers from a post-authentication command execution vulnerability.
NetEx HyperIP 6.1.0 Privilege Escalation
Posted by deepcore under exploit (No Respond)
NetEx HyperIP version 6.1.0 suffers from a privilege escalation vulnerability.
NetEx HyperIP 6.1.0 Local File Inclusion
Posted by deepcore under exploit (No Respond)
NetEx HyperIP version 6.1.0 suffers from a local file inclusion vulnerability.
Trend Micro IMSVA Management Portal 9.1.0.1600 Authentication Bypass
Posted by deepcore under exploit (No Respond)
Trend Micro IMSVA Management Portal version 9.1.0.1600 suffers from an authentication bypass vulnerability.
Select Your College Script 2.0.2 Authentication Bypass
Posted by deepcore under exploit (No Respond)
Select Your College Script version 2.0.2 suffers from an authentication bypass vulnerability.
Multi Religion Responsive Matrimonial 4.7.2 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Multi Religion Responsive Matrimonial version 4.7.2 suffers from a persistent cross site scripting vulnerability.
Multi Language Olx Clone Script 2.0.7 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Multi Language Olx Clone Script version 2.0.6 suffers from a persistent cross site scripting vulnerability.
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation
Posted by deepcore under exploit (No Respond)
This Metasploit module attempts to gain root privileges on Linux systems by abusing a vulnerability in the GNU C Library (glibc) dynamic linker. glibc ld.so in versions before 2.11.3, and 2.12.x before 2.12.2 does not properly restrict use of the LD_AUDIT environment variable when loading setuid executables. This allows loading arbitrary shared objects from the […]