Subscribe via feed.
Archive for December, 2018

[webapps] PHP Server Monitor 3.3.1 – Cross-Site Request Forgery

Posted by deepcore under Security (No Respond)

PHP Server Monitor 3.3.1 – Cross-Site Request Forgery

Tags: ,

[dos] Mozilla Firefox 63.0.1 – Denial of Service (PoC)

Posted by deepcore under Security (No Respond)

Mozilla Firefox 63.0.1 – Denial of Service (PoC)

Tags: ,

[webapps] Joomla! Component JE Photo Gallery 1.1 – 'categoryid' SQL Injection

Posted by deepcore under Security (No Respond)

Joomla! Component JE Photo Gallery 1.1 – ‘categoryid’ SQL Injection

Tags: ,

Seopanel 3.13.0 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Seopanel version 3.13.0 suffers from cross site scripting vulnerabilities.

Packet Storm New Exploits For November, 2018

Posted by deepcore under exploit (No Respond)

This archive contains all of the 210 exploits added to Packet Storm in November, 2018.

Joomla JCE 2.6.33 Arbitrary File Upload

Posted by deepcore under exploit (No Respond)

Joomla JCE component versions 2.6.7.1 through 2.6.33 suffer from an arbitrary file upload vulnerability.

Joomla JCE 2.6.33 Database Backup Disclosure

Posted by deepcore under exploit (No Respond)

Joomla JCE component versions 2.5.24 through 2.6.33 suffer from a database backup disclosure vulnerability.

KPOT Botnet Arbitrary File Disclosure

Posted by deepcore under exploit (No Respond)

The KPOT Botnet suffers from an arbitrary file disclosure vulnerability that can also disclose credentials.

Schneider Electric PLC Authentication Bypass

Posted by deepcore under exploit (No Respond)

Schneider Electric PLC suffers from a session calculation authentication bypass vulnerability.

Linux Kernel 4.8 (Ubuntu 16.04) sctp Kernel Pointer Leak

Posted by deepcore under exploit (No Respond)

Linux Kernel version 4.8 on Ubuntu 16.04 suffers from an sctp kernel pointer leak vulnerability.