[remote] Paramiko 2.4.1 – Authentication Bypass
Posted by deepcore under Security (No Respond)
Archive for October, 2018
[local] Modbus Slave PLC 7 – '.msw' Buffer Overflow (PoC)
Posted by deepcore under Security (No Respond)
[webapps] Open Faculty Evaluation System 5.6 – 'batch_name' SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] Grapixel New Media 2 – 'pageref' SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] Library Management System 1.0 – 'frmListBooks' SQL Injection
Posted by deepcore under Security (No Respond)
WordPress Arforms 3.5.1 Arbitrary File Delete
Posted by deepcore under exploit (No Respond)
WordPress Arforms plugin versions 3.5.1 and below suffer from an arbitrary file deletion vulnerability.
Webiness Inventory 2.9 Shell Upload
Posted by deepcore under exploit (No Respond)
Webiness Inventory version 2.9 suffers from a remote shell upload vulnerability.
http://www.childrenhospital.go.th/index.htm
Posted by deepcore under defacement (No Respond)
http://www.childrenhospital.go.th/index.htm notified by Typical Idiot Security
Tags: defacementBORGChat 1.0.0 Build 438 Denial Of Service
Posted by deepcore under exploit (No Respond)
BORGChat version 1.0.0 build 438 denial of service proof of concept exploit.
MPS Box 0.1.8.0 SQL Injection
Posted by deepcore under exploit (No Respond)
MPS Box version 0.1.8.0 suffers from a remote SQL injection vulnerability.