Subscribe via feed.
Archive for January, 2020

MSN Password Recovery 1.30 XML Injection

Posted by deepcore under exploit (No Respond)

MSN Password Recovery version 1.30 suffers from an XML external entity injection vulnerability.

Firefox Gets Patch For Critical 0-Day That's Being Actively Exploited

Posted by deepcore under exploit (No Respond)

[local] MSN Password Recovery 1.30 – XML External Entity Injection

Posted by deepcore under Security (No Respond)

MSN Password Recovery 1.30 – XML External Entity Injection

Tags: ,

[dos] ZIP Password Recovery 2.30 – 'ZIP File' Denial of Service (PoC)

Posted by deepcore under Security (No Respond)

ZIP Password Recovery 2.30 – ‘ZIP File’ Denial of Service (PoC)

Tags: ,

[webapps] Oracle Weblogic 10.3.6.0.0 – Remote Command Execution

Posted by deepcore under Security (No Respond)

Oracle Weblogic 10.3.6.0.0 – Remote Command Execution

Tags: ,

AnyDesk 5.4.0 Unquoted Service Path

Posted by deepcore under exploit (No Respond)

AnyDesk version 5.4.0 suffers from an unquoted service path vulnerability.

Complaint Management System 4.0 Remote Code Execution

Posted by deepcore under exploit (No Respond)

Complaint Management System version 4.0 suffers from a remote code execution vulnerability.

piSignage 2.6.4 Directory Traversal

Posted by deepcore under exploit (No Respond)

piSignage version 2.6.4 suffers from a directory traversal vulnerability.

Dairy Farm Shop Management System 1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

Dairy Farm Shop Management System version 1.0 suffers from a remote SQL injection vulnerability.

Dairy Farm Shop Management System 1.0 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Dairy Farm Shop Management System version 1.0 suffers from a persistent cross site scripting vulnerability.