Subscribe via feed.
Archive for September, 2018

Go Pro Fusion Studio 1.2 Privilege Escalation

Posted by deepcore under exploit (No Respond)

Go Pro Fusion Studio version 1.2 suffers from a privilege escalation vulnerability.

FUJI XEROX DocuCentre-V 3065 Printer Remote Command Execution

Posted by deepcore under exploit (No Respond)

FUJI XEROX DocuCentre-V 3065 Printer suffers from a remote command execution vulnerability.

Amcrest Cameras SSL Key Reuse Across installations

Posted by deepcore under exploit (No Respond)

Amcrest Cameras have a static SSL key embedded in their firmware.

Opsview Monitor 5.x Command Execution

Posted by deepcore under exploit (No Respond)

Opsview Monitor versions 5.2, 5.3, and 5.4 suffer from cross site scripting and multiple remote command execution vulnerabilities.

Tenda ADSL Router D152 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Tenda ADSL router D152 suffers from a cross site scripting vulnerability.

NovaRad NovaPACS Diagnostics Viewer 8.5 File Disclosure

Posted by deepcore under exploit (No Respond)

NovaRad NovaPACS Diagnostics Viewer version 8.5 suffers from an XML external entity injection vulnerability that allows for file disclosure.

Symantec Mobile Encryption For iPhone 2.1.0 Denial Of Service

Posted by deepcore under Apple (No Respond)

Symantec Mobile Encryption for iPhone version 2.1.0 suffers from a denial of service vulnerability.

Tags: , ,

[webapps] Apache Roller 5.0.3 – XML External Entity Injection (File Disclosure)

Posted by deepcore under Security (No Respond)

Apache Roller 5.0.3 – XML External Entity Injection (File Disclosure)

Tags: ,

[webapps] Jorani Leave Management 0.6.5 – 'startdate' SQL Injection

Posted by deepcore under Security (No Respond)

Jorani Leave Management 0.6.5 – ‘startdate’ SQL Injection

Tags: ,

[webapps] NovaRad NovaPACS Diagnostics Viewer 8.5 – XML External Entity Injection (File Disclosure)

Posted by deepcore under Security (No Respond)

NovaRad NovaPACS Diagnostics Viewer 8.5 – XML External Entity Injection (File Disclosure)

Tags: ,