Subscribe via feed.
Archive for August, 2019

EyesOfNetwork 5.1 Remote Command Execution

Posted by deepcore under exploit (No Respond)

EyesOfNetwork version 5.1 authenticated remote command execution exploit.

Integria IMS 5.0.86 Arbitrary File Upload

Posted by deepcore under exploit (No Respond)

Integria IMS version 5.0.86 suffers from an arbitrary file upload vulnerability that allows for remote command execution.

Web Wiz Forums 12.01 SQL Injection

Posted by deepcore under exploit (No Respond)

Web Wiz Forums version 12.01 suffers from a remote SQL injection vulnerability.

Joomla JS Jobs 1.2.6 Arbitrary File Delete

Posted by deepcore under exploit (No Respond)

Joomla JS Jobs component version 1.2.6 suffers from an arbitrary file deletion vulnerability.

GetGo Download Manager 6.2.2.3300 Denial Of Service

Posted by deepcore under exploit (No Respond)

GetGo Download Manager version 6.2.2.3300 suffers from a denial of service vulnerability.

GNU patch Command Injection / Directory Traversal

Posted by deepcore under exploit (No Respond)

GNU patch suffers from command injection and various other vulnerabilities when handling specially crafted patch files.

Open-Xchange OX Guard Cross Site Scripting / Signature Validation

Posted by deepcore under exploit (No Respond)

Open-Xchange OX Guard versions 7.10.2 and below suffer from a cross site scripting vulnerability. Open-Xchange OX Guard versions 7.10.1 and below, 2.10.2 and below suffer from a signature validation vulnerability.

Open-Xchange OX App Suite Content Spoofing / Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Open-Xchange OX App Suite suffers from a content spoofing, cross site scripting, and information disclosure vulnerabilities. Versions affected vary depending on the vulnerability.

WordPress Download Manager 2.5 Cross Site Request Forgery

Posted by deepcore under exploit (No Respond)

WordPress Download Manager plugin version 2.5 suffers from a cross site request forgery vulnerability.

ABC2MTEX 1.6.1 Stack Overflow

Posted by deepcore under exploit (No Respond)

ABC2MTEX version 1.6.1 suffers from a command-line stack overflow vulnerability.