Subscribe via feed.
Archive for November, 2018

WordPress Universal Post Manager 1.5.0 Database Disclosure

Posted by deepcore under exploit (No Respond)

WordPress Universal Post Manager plugin version 1.5.0 suffers from a database disclosure vulnerability.

Oracle Secure Global Desktop Administration Console 4.4 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Oracle Secure Global Desktop Administration Console version 4.4 build 20080807152602 suffers from cross site scripting vulnerabilities.

Xorg X11 Server SUID Privilege Escalation

Posted by deepcore under exploit (No Respond)

This Metasploit module attempts to gain root privileges with SUID Xorg X11 server versions 1.19.0 up to 1.20.3. A permission check flaw exists for -modulepath and -logfile options when starting Xorg. This allows unprivileged users that can start the server the ability to elevate privileges and run arbitrary code under root privileges. This Metasploit module […]

[local] Xorg X11 Server – SUID privilege escalation (Metasploit)

Posted by deepcore under Security (No Respond)

Xorg X11 Server – SUID privilege escalation (Metasploit)

Tags: ,

[local] Arm Whois 3.11 – Buffer Overflow (ASLR)

Posted by deepcore under Security (No Respond)

Arm Whois 3.11 – Buffer Overflow (ASLR)

Tags: ,

[papers] CORS Attacks

Posted by deepcore under Security (No Respond)

CORS Attacks

Tags: ,

[papers] CORS Attacks

Posted by deepcore under Security (No Respond)

CORS Attacks

Tags: ,

[webapps] Zyxel VMG1312-B10D 5.13AAXA.8 – Directory Traversal

Posted by deepcore under Security (No Respond)

Zyxel VMG1312-B10D 5.13AAXA.8 – Directory Traversal

Tags: ,

[webapps] No-Cms 1.0 – 'order_by' SQL Injection

Posted by deepcore under Security (No Respond)

No-Cms 1.0 – ‘order_by’ SQL Injection

Tags: ,

[dos] MariaDB Client 10.1.26 – Denial of Service (PoC)

Posted by deepcore under Security (No Respond)

MariaDB Client 10.1.26 – Denial of Service (PoC)

Tags: ,