Vuze Bittorrent Client 5.7.6.0 SSDP Processing XML Injection
Posted by deepcore under exploit (No Respond)
Vuze Bittorrent Client version 5.7.6.0 suffers from an XML external entity injection vulnerability in SSDP processing.
Archive for August, 2018
Plex Media Server 1.13.2.5154 SSDP Processing XML Injection
Posted by deepcore under exploit (No Respond)
Plex Media Server version 1.13.2.5154 suffers from an XML external entity injection vulnerability in SSDP processing.
Basic B2B Script 2.0.0 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Basic B2B Script version 2.0.0 suffers from a cross site scripting vulnerability.
PHP Template Store Script 3.0.6 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
PHP Template Store Script version 3.0.6 suffers from persistent cross site scripting vulnerabilities.
Wedding Slideshow Studio 1.36 Buffer Overflow
Posted by deepcore under exploit (No Respond)
Wedding Slideshow Studio version 1.36 suffers from a buffer overflow vulnerability.
Fortinet FortiClient 5.2.3 Local Privilege Escalation
Posted by deepcore under exploit (No Respond)
Fortinet FortiClient version 5.2.3 (Windows 10 x64 Creators) suffers from a local privilege escalation vulnerability.
Subrion CMS 4.2.1 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Subrion CMS version 4.2.1 suffers from a cross site scripting vulnerability.
Rufus 3.0 / 3.1 Privilege Escalation
Posted by deepcore under exploit (No Respond)
Rufus versions 3.0 and 3.1 suffers from dll hijacking vulnerabilities.
OCS Inventory NG Webconsole Shell Upload
Posted by deepcore under exploit (No Respond)
OCS Inventory NG OCS Inventory Server through 2.5 allows a privileged user to gain access to the server via a template file containing PHP code, because file extensions other than .html are permitted.
[dos] QNap QVR Client 5.0.3.23100 – Denial of Service (PoC)
Posted by deepcore under Security (No Respond)