[dos] Xlight FTP Server 3.9.1 – Buffer Overflow (PoC)
Posted by deepcore under Security (No Respond)
Archive for February, 2019
[webapps] Advance Gift Shop Pro Script 2.0.3 – SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] News Website Script 2.0.5 – SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] zzzphp CMS 1.6.1 – Remote Code Execution
Posted by deepcore under Security (No Respond)
[webapps] PHP Ecommerce Script 2.0.6 – Cross-Site Scripting / SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] Jenkins Plugin Script Security 1.49/Declarative 1.3.4/Groovy 2.60 – Remote Code Execution
Posted by deepcore under Security (No Respond)
Jenkins Plugin Script Security 1.49/Declarative 1.3.4/Groovy 2.60 – Remote Code Execution
Tags: 0day, remote exploit[webapps] Drupal < 8.6.9 – REST Module Remote Code Execution
Posted by deepcore under Security (No Respond)
HanYazilim Paper Submission System .NET 1.0 Shell Upload
Posted by deepcore under exploit (No Respond)
HanYazilim Paper Submission System .NET version 1.0 suffers from a remote shell upload vulnerability.
Quest NetVault Backup Server Code Execution / SQL Injection
Posted by deepcore under exploit (No Respond)
Quest NetVault Backup Server versions prior to 11.4.5 suffer from process manager service SQL injection and remote code execution vulnerabilities.
Tautulli 2.1.26 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Tautulli version 2.1.26 suffers from a cross site scripting vulnerability.