Subscribe via feed.
Archive for April, 2019

Ektron CMS 9 Database Disclosure

Posted by deepcore under exploit (No Respond)

Ektron CMS version 9 suffers from a database disclosure vulnerability.

Mash Project Integrated 4.2.7.1 Database Disclosure

Posted by deepcore under exploit (No Respond)

Mash Project Integrated version 4.2.7.1 suffers from a database disclosure vulnerability.

Shinobi Security Software 1.0 Database Disclosure

Posted by deepcore under exploit (No Respond)

Shinobi Security Software version 1.0 suffers from a database disclosure vulnerability.

Directus Suite CMS 7.0.15 Database Disclosure

Posted by deepcore under exploit (No Respond)

Directus Suite CMS version 7.0.15 suffers from a database disclosure vulnerability.

Oracle Weblogic Server Deserialization RMI UnicastRef Remote Code Execution

Posted by deepcore under exploit (No Respond)

An unauthenticated attacker with network access to the Oracle Weblogic Server T3 interface can send a serialized object (sun.rmi.server.UnicastRef) to the interface to execute code on vulnerable hosts.

phpFileManager 1.7.8 Local File Inclusion

Posted by deepcore under exploit (No Respond)

phpFileManager version 1.7.8 suffers from a local file inclusion vulnerability.

[dos] SpiderMonkey – IonMonkey Compiled Code Fails to Update Inferred Property Types (Type Confusion)

Posted by deepcore under Security (No Respond)

SpiderMonkey – IonMonkey Compiled Code Fails to Update Inferred Property Types (Type Confusion)

Tags: ,

[dos] WebKitGTK+ – 'ThreadedCompositor' Race Condition

Posted by deepcore under Security (No Respond)

WebKitGTK+ – ‘ThreadedCompositor’ Race Condition

Tags: ,

[webapps] iScripts ReserveLogic – SQL Injection

Posted by deepcore under Security (No Respond)

iScripts ReserveLogic – SQL Injection

Tags: ,

[dos] Google Chrome 72.0.3626.81 – 'V8TrustedTypePolicyOptions::ToImpl' Type Confusion

Posted by deepcore under Security (No Respond)

Google Chrome 72.0.3626.81 – ‘V8TrustedTypePolicyOptions::ToImpl’ Type Confusion

Tags: ,