WordPress allow-l10n-upload-filename 1.0 Arbitrary File Download
Posted by deepcore under exploit (No Respond)
WordPress allow-l10n-upload-filename plugin version 1.0 suffers from an arbitrary file download vulnerability.
Archive for November, 2018
WordPress sermon-shortcodes 1.0 Arbitrary File Download
Posted by deepcore under exploit (No Respond)
WordPress sermon-shortcodes plugin version 1.0 suffers from an arbitrary file download vulnerability.
WordPress uploadingdownloading-non-latin-filename 1.1.5 Arbitrary File Download
Posted by deepcore under exploit (No Respond)
WordPress uploadingdownloading-non-latin-filename plugin version 1.1.5 suffers from an arbitrary file download vulnerability.
WordPress hwm_board 1.0 Arbitrary File Disclosure
Posted by deepcore under exploit (No Respond)
WordPress hwm_board plugin version 1.0 suffers from an arbitrary database download vulnerability.
WordPress user-spam-remover 1.0 Database Disclosure
Posted by deepcore under exploit (No Respond)
WordPress user-spam-remover plugin version 1.0 suffers from a database backup disclosure vulnerability.
WordPress Delme 3.0 Database Disclosure
Posted by deepcore under exploit (No Respond)
WordPress Delme plugin version 3.0 suffers from a database backup disclosure vulnerability.
[local] Linux – Nested User Namespace idmap Limit Local Privilege Escalation (Metasploit)
Posted by deepcore under Security (No Respond)
Linux – Nested User Namespace idmap Limit Local Privilege Escalation (Metasploit)
Tags: 0day, remote exploit[dos] WebKit JSC JIT – 'JSPropertyNameEnumerator' Type Confusion
Posted by deepcore under Security (No Respond)
[remote] TeamCity Agent – XML-RPC Command Execution (Metasploit)
Posted by deepcore under Security (No Respond)
[local] Mac OS X – libxpc MITM Privilege Escalation (Metasploit)
Posted by deepcore under Security (No Respond)