[webapps] Liferay Portal < 7.0.4 – Server-Side Request Forgery
Posted by deepcore under Security (No Respond)
Archive for June, 2018
LaraChurch 1.0 Shell Upload
Posted by deepcore under exploit (No Respond)
LaraChurch Complete Church Management System version 1.0 suffers from a remote shell upload vulnerability.
[webapps] Travel Agency 1.1 – 'cid' SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] WordPress Plugin iThemes Security < 7.0.3 – SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] Ecessa WANWorx WVR-30 < 10.7.4 – Cross-Site Request Forgery (Add Superuser)
Posted by deepcore under Security (No Respond)
Ecessa WANWorx WVR-30 < 10.7.4 – Cross-Site Request Forgery (Add Superuser)
Tags: 0day, remote exploit[webapps] Ecessa Edge EV150 10.7.4 – Cross-Site Request Forgery (Add Superuser)
Posted by deepcore under Security (No Respond)
[webapps] AsusWRT RT-AC750GF – Cross-Site Request Forgery (Change Admin Password)
Posted by deepcore under Security (No Respond)
[dos] DIGISOL DG-BR4000NG – Buffer Overflow (PoC)
Posted by deepcore under Security (No Respond)
[webapps] Ecessa ShieldLink SL175EHQ < 10.7.4 – Cross-Site Request Forgery (Add Superuser)
Posted by deepcore under Security (No Respond)
Ecessa ShieldLink SL175EHQ < 10.7.4 – Cross-Site Request Forgery (Add Superuser)
Tags: 0day, remote exploit[papers] Security of Modern Bluetooth Keyboards
Posted by deepcore under Security (No Respond)