Subscribe via feed.
Archive for December, 2019

Integard Pro NoJs 2.2.0.9026 Remote Buffer Overflow

Posted by deepcore under exploit (No Respond)

Integard Pro NoJs version 2.2.0.9026 suffers from a remote buffer overflow vulnerability.

Trend Micro Deep Security Agent 11 Arbitrary File Overwrite

Posted by deepcore under exploit (No Respond)

Trend Micro Deep Security Agent 11 suffers from an arbitrary file overwrite vulnerability.

Yachtcontrol 2019-10-06 Remote Code Execution

Posted by deepcore under exploit (No Respond)

Yachtcontrol versions dated 2019-10-06 suffer from an unauthenticated remote code execution vulnerability.

SiteVision 4.x / 5.x Insufficient Module Access Control

Posted by deepcore under exploit (No Respond)

SiteVision suffers from an issue where attacker may inject non-authorized module when editing pages using a lower privileged account, which can lead to cross site scripting and remote code execution. All versions of SiteVision 4 until 4.5.6 and all versions of SiteVision 5 until 5.1.1 are vulnerable.

SiteVision 4.x / 5.x Remote Code Execution

Posted by deepcore under exploit (No Respond)

SiteVision suffers from an issue where attackers may execute arbitrary code as root on the target server after gaining access to a low-privilege account. All versions of SiteVision 4 until 4.5.6 and all versions of SiteVision 5 until 5.1.1 are vulnerable.

OkayCMS 2.3.4 Remote Code Execution

Posted by deepcore under exploit (No Respond)

OkayCMS versions 2.3.4 and below suffer from remote code execution vulnerability.

[local] Mozilla FireFox (Windows 10 x64) – Full Chain Client Side Attack

Posted by deepcore under Security (No Respond)

Mozilla FireFox (Windows 10 x64) – Full Chain Client Side Attack

Tags: ,

NETGATE Data Backup 3.0.620 Unquoted Service Path

Posted by deepcore under exploit (No Respond)

NETGATE Data Backup version 3.0.620 suffers from an unquoted service path vulnerability.

Amiti Antivirus 25.0.640 Unquoted Service Path

Posted by deepcore under exploit (No Respond)

Amiti Antivirus version 25.0.640 suffers from an unquoted service path vulnerability.

Qualys Security Advisory – OpenBSD Authentication Bypass / Privilege Escalation

Posted by deepcore under exploit (No Respond)

Qualys has discovered that OpenBSD suffers from multiple authentication bypass and local privilege escalation vulnerabilities.