[webapps] XooGallery – Multiple SQL Injection
Posted by deepcore under Security (No Respond)
Archive for March, 2019
[webapps] Rukovoditel ERP & CRM 2.4.1 – 'path' Cross-Site Scripting
Posted by deepcore under Security (No Respond)
[papers] JMX RMI – Multiple Applications Remote Code Execution
Posted by deepcore under Security (No Respond)
[webapps] Jettweb Php Hazır İlan Sitesi Scripti V2 – SQL Injection
Posted by deepcore under Security (No Respond)
[dos] Firefox < 66.0.1 – 'Array.prototype.slice' Buffer Overflow
Posted by deepcore under Security (No Respond)
Apache CouchDB 2.3.1 Cross Site Request Forgery / Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Apache CouchDB version 2.3.1 suffers from cross site request forgery and cross site scripting vulnerabilities.
TCPDF 6.2.19 Deserialization / Remote Code Execution
Posted by deepcore under exploit (No Respond)
TCPDF versions 6.2.19 and below suffer from a deserialization vulnerability that can allow for remote code execution.
[webapps] Zeeways Matrimony CMS – SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] Zeeways Jobsite CMS – 'id' SQL Injection
Posted by deepcore under Security (No Respond)
[local] VMware Workstation 14.1.5 / VMware Player 15 – Host VMX Process COM Class Hijack Privilege Escalation
Posted by deepcore under Security (No Respond)
VMware Workstation 14.1.5 / VMware Player 15 – Host VMX Process COM Class Hijack Privilege Escalation
Tags: 0day, remote exploit