[webapps] IPSwitch MOVEit 8.1 < 9.4 – Cross-Site Scripting
Posted by deepcore under Security (No Respond)
Archive for February, 2018
[webapps] Joomla! Component JE PayperVideo 3.0.0 – 'usr_plan' SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] Joomla! Component JEXTN Reverse Auction 3.1.0 – SQL Injection
Posted by deepcore under Security (No Respond)
[shellcode] Linux/x64 – Twofish Encoded + DNS (CNAME) Password + execve(/bin/sh) Shellcode
Posted by deepcore under Security (No Respond)
Linux/x64 – Twofish Encoded + DNS (CNAME) Password + execve(/bin/sh) Shellcode
Tags: 0day, remote exploit[webapps] Joomla! Component JMS Music 1.1.1 – SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] Joomla! Component Jimtawl 2.1.6 – Arbitrary File Upload
Posted by deepcore under Security (No Respond)
[webapps] Oracle Hospitality Simphony (MICROS) 2.7 < 2.9 – Directory Traversal
Posted by deepcore under Security (No Respond)
[webapps] Joomla! Component JEXTN Classified 1.0.0 – 'sid' SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] FiberHome AN5506 – Unauthenticated Remote DNS Change
Posted by deepcore under Security (No Respond)
systemd Local Privilege Escalation
Posted by deepcore under exploit (No Respond)
systemd (systemd-tmpfiles) versions prior to 236 suffer from an fs.protected_hardlinks=0 local privilege escalation vulnerability.