Avaya IP Office Application Server 11.0.0.0 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Avaya IP Office Application Server version 11.0.0.0 suffers from a cross site scripting vulnerability.
Archive for February, 2020
Quick N Easy Web Server 3.3.8 Denial Of Service
Posted by deepcore under exploit (No Respond)
Quick N Easy Web Server versions 3.3.8 and below suffer from a denial of service vulnerability.
DotNetNuke CMS 9.5.0 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Cross site scripting attacks can be launched against DotNetNuke CMS version 9.5.0 by uploading a malicious XML file.
DotNetNuke CMS 9.5.0 File Extension Check Bypass
Posted by deepcore under exploit (No Respond)
DotNetNuke CMS version 9.5.0 suffers from file extension check bypass vulnerability that allows for arbitrary file upload.
eLection 2.0 SQL Injection
Posted by deepcore under exploit (No Respond)
eLection version 2.0 suffers from a remote SQL injection vulnerability.
DotNetNuke CMS 9.4.4 Zip Directory Traversal
Posted by deepcore under exploit (No Respond)
DotNetNuke CMS version 9.4.4 suffers from zip split issue where a directory traversal attack can be performed to overwrite files or execute malicious code.
CandidATS 2.1.0 Cross Site Request Forgery
Posted by deepcore under exploit (No Respond)
CandidATS version 2.1.0 suffers from a cross site request forgery vulnerability.
Android Binder Use-After-Free
Posted by deepcore under exploit (No Respond)
Android Binder use-after-free exploit.
SecuSTATION IPCAM-130 HD Camera Remote Configuration Disclosure
Posted by deepcore under exploit (No Respond)
SecuSTATION IPCAM-130 HD Camera remote configuration disclosure exploit.
ACE SECURITY WiP-90113 HD Camera Remote Configuration Disclosure
Posted by deepcore under exploit (No Respond)
ACE SECURITY WiP-90113 HD Camera remote configuration disclosure exploit.