[webapps] Satellian 1.12 – Remote Code Execution
Posted by deepcore under Security (No Respond)
Archive for January, 2020
[local] Microsoft Windows 10 – Theme API 'ThemePack' File Parsing
Posted by deepcore under Security (No Respond)
[webapps] Cups Easy 1.0 – Cross Site Request Forgery (Password Reset)
Posted by deepcore under Security (No Respond)
[local] XMLBlueprint 16.191112 – XML External Entity Injection
Posted by deepcore under Security (No Respond)
[webapps] Liferay CE Portal 6.0.2 – Remote Command Execution
Posted by deepcore under Security (No Respond)
[webapps] Kibana 6.6.1 – CSV Injection
Posted by deepcore under Security (No Respond)
[dos] macOS/iOS ImageIO – Heap Corruption when Processing Malformed TIFF Image
Posted by deepcore under Security (No Respond)
[webapps] Centreon 19.10.5 – Database Credentials Disclosure
Posted by deepcore under Security (No Respond)
[webapps] Octeth Oempro 4.8 – 'CampaignID' SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] Adive Framework 2.0.8 – Cross-Site Request Forgery (Change Admin Password)
Posted by deepcore under Security (No Respond)
Adive Framework 2.0.8 – Cross-Site Request Forgery (Change Admin Password)
Tags: 0day, remote exploit