Subscribe via feed.
Archive for August, 2018

[dos] Firefox 55.0.3 – Denial of Service (PoC)

Posted by deepcore under Security (No Respond)

Firefox 55.0.3 – Denial of Service (PoC)

Tags: ,

[local] CuteFTP 5.0 – Buffer Overflow

Posted by deepcore under Security (No Respond)

CuteFTP 5.0 – Buffer Overflow

Tags: ,

[webapps] Gleez CMS 1.2.0 – Cross-Site Request Forgery (Add Admin)

Posted by deepcore under Security (No Respond)

Gleez CMS 1.2.0 – Cross-Site Request Forgery (Add Admin)

Tags: ,

http://surat2.go.th/sa.html

Posted by deepcore under defacement (No Respond)

http://surat2.go.th/sa.html notified by Salman Hacker

Tags:

[remote] Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 – Remote Code Execution

Posted by deepcore under Security (No Respond)

Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 – Remote Code Execution

Tags: ,

[webapps] WordPress Plugin Gift Voucher 1.0.5 – 'template_id' SQL Injection

Posted by deepcore under Security (No Respond)

WordPress Plugin Gift Voucher 1.0.5 – ‘template_id’ SQL Injection

Tags: ,

[webapps] ManageEngine ADManager Plus 6.5.7 – Cross-Site Scripting

Posted by deepcore under Security (No Respond)

ManageEngine ADManager Plus 6.5.7 – Cross-Site Scripting

Tags: ,

NEC Aterm WG2600HP2 Information Disclosure

Posted by deepcore under exploit (No Respond)

NEC Aterm WG2600HP2 suffers from an information disclosure vulnerability due to missing authentication.

PLANEX CS-QR20 Command Execution

Posted by deepcore under exploit (No Respond)

PLANEX CS-QR20 suffers from a remote command execution vulnerability due to a hidden management page existing.

PLANEX CS-QR20 Hardcoded Credential

Posted by deepcore under exploit (No Respond)

PLANEX CS-QR20 suffers from a hardcoded administrative login credential vulnerability.