:: Deepquest ::

Flexpaper PHP Publish Service 2.3.6 – Remote Code Execution

OpenKM 6.3.2 < 6.3.7 – Remote Command Execution (Metasploit)

Liferay CE Portal < 7.1.2 ga3 – Remote Command Execution (Metasploit)

Linux/x86 – Polymorphic execve(/bin/sh) Shellcode (63 bytes)

phpBB version 3.2.3 remote code execution exploit.

The vulnerability laboratory core research team discovered multiple persistent cross site vulnerabilities in the Sparkasse online service web-application.

Anyburn version 4.3 x86 “Copy disc to image file” buffer overflow SEH unicode exploit.

This Metasploit module creates a virtual web server and uploads the php payload into it. Admin privileges cannot access any server files except File Station files. The user who is authorized to create Virtual Web Server can upload malicious php file by activating the server. Exploit creates a new directory into File Station to connect […]

OrientDB version 3.0.17 GA Community Edition suffers from cross site request forgery and cross site scripting vulnerabilities.

Kados R10 GreenBee suffers from a remote SQL injection vulnerability in the menu_lev1 parameter.