Online Course Registration 2.0 SQL Injection
Posted by deepcore under exploit (No Respond)
Online Course Registration 2.0 suffers from authentication bypass and remote SQL injection vulnerabilities.
Archive for April, 2020
Maian Support Helpdesk 4.3 Cross Site Request Forgery
Posted by deepcore under exploit (No Respond)
Maian Support Helpdesk version 4.3 suffers from a cross site request forgery vulnerability.
Geeklog 2.2.1 SQL Injection
Posted by deepcore under exploit (No Respond)
Geeklog version 2.2.1 suffers from a remote SQL injection vulnerability.
Docker-Credential-Wincred.exe Privilege Escalation
Posted by deepcore under exploit (No Respond)
This Metasploit module exploit leverages a vulnerability in Docker Desktop Community Edition versions prior to 2.1.0.1 where an attacker can write a payload to a lower-privileged area to be executed automatically by the docker user at login.
File Explorer v1.4 iOS – Information Disclosure Vulnerability
Posted by deepcore under exploit (No Respond)
The vulnerability laboratory core research team discovered an information disclosure vulnerability in the File Explorer …
Transfer Master v3.3 iOS – Denial of Service Vulnerability
Posted by deepcore under exploit (No Respond)
The vulnerability laboratory core research team discovered a remote denial of service vulnerability in the Transfer Mast…
POS PHP v17.5 – Persistent Cross Site Web Vulnerability
Posted by deepcore under exploit (No Respond)
The vulnerability laboratory core research team discovered a persistent cross site scripting web vulnerability in the PO…
IDM v6.37.11.1 – Stack Buffer Overflow Vulnerabilities
Posted by deepcore under exploit (No Respond)
The vulnerability laboratory core research team discovered a stack buffer overflow vulnerabilities in the Internet Downl…
[webapps] School ERP Pro 1.0 – Remote Code Execution
Posted by deepcore under Security (No Respond)
[local] NVIDIA Update Service Daemon 1.0.21 – 'nvUpdatusService' Unquoted Service Path
Posted by deepcore under Security (No Respond)
NVIDIA Update Service Daemon 1.0.21 – ‘nvUpdatusService’ Unquoted Service Path
Tags: 0day, remote exploit