Hisilicon HiIpcam V100R003 Remote ADSL Credential Disclosure
Posted by deepcore under exploit (No Respond)
Hisilicon HiIpcam V100R003 suffers from a remote credential disclosure vulnerability.
Archive for September, 2019
macOS 18.7.0 Kernel Local Privilege Escalation
Posted by deepcore under exploit (No Respond)
macOS version 18.7.0 kernel local privilege escalation exploit that may only work on Macs before 2016.
Western Digital My Book World II NAS 1.02.12 Hardcoded Credential
Posted by deepcore under exploit (No Respond)
Western Digital My Book World II NAS versions 1.02.12 and below have a hard-coded ssh credential that allows for remote command execution.
[webapps] LayerBB < 1.1.4 – Cross-Site Request Forgery
Posted by deepcore under Security (No Respond)
Oracle Mojarra JSF / Eclipse Mojarra JSF 2.2 / 2.3 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Oracle Mojarra JSF included in Java EE 7 and Eclipse Mojarra JSF versions 2.2 and 2.3 suffer from a cross site scripting vulnerability.
Hospital-Management 1.26 SQL Injection
Posted by deepcore under exploit (No Respond)
Hospital-Management version 1.26 suffers from a remote SQL injection vulnerability.
[webapps] GOautodial 4.0 – 'CreateEvent' Persistent Cross-Site Scripting
Posted by deepcore under Security (No Respond)
[webapps] Western Digital My Book World II NAS 1.02.12 – Authentication Bypass / Command Execution
Posted by deepcore under Security (No Respond)
Western Digital My Book World II NAS 1.02.12 – Authentication Bypass / Command Execution
Tags: 0day, remote exploithttp://www.elum.go.th/jp.htm
Posted by deepcore under defacement (No Respond)
http://www.elum.go.th/jp.htm notified by Moeslim
Tags: defacementhttp://amnatpao.go.th
Posted by deepcore under defacement (No Respond)
http://amnatpao.go.th notified by Scrub
Tags: defacement