Subscribe via feed.
Archive for December, 2018

Simple CMS PHPJabbers Stivasoft 4.0 Database Disclosure

Posted by deepcore under exploit (No Respond)

Simple CMS PHPJabbers Stivasoft version 4.0 suffers from a database disclosure vulnerability.

ITAdvisorsNepal 9Qube Testimonials 1.0 Database Disclosure

Posted by deepcore under exploit (No Respond)

ITAdvisorsNepal 9Qube Testimonials module version 1.0 suffers from a database disclosure vulnerability.

Zoho ManageEngine OpManager 12.3 SQL Injection

Posted by deepcore under exploit (No Respond)

Zoho ManageEngine OpManager versions 12.3 before 123238 suffer from a remote SQL injection vulnerability in the getGraphData API.

Razer Cortex Debugger Remote Command Execution

Posted by deepcore under exploit (No Respond)

Razer Cortex has a CEF debugger stub enabled by default allowing arbitrary remote command execution.

http://tessabantak.go.th/index.php

Posted by deepcore under defacement (No Respond)

http://tessabantak.go.th/index.php notified by KURD ELECTRONIC TEAM

Tags:

http://www.tamafuang.go.th

Posted by deepcore under defacement (No Respond)

http://www.tamafuang.go.th notified by KURD ELECTRONIC TEAM

Tags:

[remote] MiniShare 1.4.1 – Remote Buffer Overflow HEAD and POST Method

Posted by deepcore under Security (No Respond)

MiniShare 1.4.1 – Remote Buffer Overflow HEAD and POST Method

Tags: ,

[webapps] SDL Web Content Manager 8.5.0 – XML External Entity Injection

Posted by deepcore under Security (No Respond)

SDL Web Content Manager 8.5.0 – XML External Entity Injection

Tags: ,

Subsonic v6.1.5 – Server Side Request Forgery & CSRF

Posted by deepcore under exploit (No Respond)

The vulnerability laboratory core research team discovered a server-side request forgery and csrf issue in the official …

NetChat v7.8 – Persistent Cross Site Scripting Vulnerability

Posted by deepcore under exploit (No Respond)

The vulnerability laboratory core research team discovered a persistent cross site scripting vulnerability in the offici…