Subscribe via feed.
Archive for October, 2018

Photo Nettoyeur 1.4.5 Insecure File Permission

Posted by deepcore under exploit (No Respond)

Photo Nettoyeur version 1.4.5 suffers from an insecure file permission vulnerability.

LayerBB Forum 1.1.1 SQL Injection

Posted by deepcore under exploit (No Respond)

LayerBB Forum version 1.1.1 suffers from a remote SQL injection vulnerability.

NICO-FTP 3.0.1.19 SEH Buffer Overflow

Posted by deepcore under exploit (No Respond)

NICO-FTP version 3.0.1.19 suffers from a buffer overflow vulnerability.

virtualenv 16.0.0 Sandbox Escape

Posted by deepcore under exploit (No Respond)

virtualenv version 16.0.0 suffers from a sandbox escape vulnerability.

WordPress Pie Register 3.0.15 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Pie Register plugin version 3.0.15 suffers from a cross site scripting vulnerability.

ISPConfig Remote Command Execution

Posted by deepcore under exploit (No Respond)

ISPConfig versions prior to 3.1.13 remote command execution exploit.

D-Link Central WiFiManager Software Controller Code Execution / XSS

Posted by deepcore under exploit (No Respond)

D-Link Central WiFiManager Software Controller suffers from hard-coded credential, code execution, and cross site scripting vulnerabilities. Version 1.03 is affected.

[webapps] Chamilo LMS 1.11.8 – Cross-Site Scripting

Posted by deepcore under Security (No Respond)

Chamilo LMS 1.11.8 – Cross-Site Scripting

Tags: ,

[webapps] D-Link Central WiFiManager Software Controller 1.03 – Multiple Vulnerabilities

Posted by deepcore under Security (No Respond)

D-Link Central WiFiManager Software Controller 1.03 – Multiple Vulnerabilities

Tags: ,

[webapps] ISPConfig < 3.1.13 – Remote Command Execution

Posted by deepcore under Security (No Respond)

ISPConfig < 3.1.13 – Remote Command Execution

Tags: ,