Sentrifugo v3.2 CMS – Persistent XSS Web Vulnerability
Posted by deepcore under exploit (No Respond)
The vulnerability laboratory core research team discovered a persistent cross site scripting vulnerability in the Sentri…
Archive for May, 2020
Qik Chat v3.0 iOS – (Name) Command Inject Vulnerability
Posted by deepcore under exploit (No Respond)
The vulnerability laboratory core research team discovered a command injection vulnerability in the Qik Chat v3.0 in the…
[webapps] NEC Electra Elite IPK II WebPro 01.03.01 – Session Enumeration
Posted by deepcore under Security (No Respond)
[webapps] SimplePHPGal 0.7 – Remote File Inclusion
Posted by deepcore under Security (No Respond)
[webapps] BlogEngine 3.3 – 'syndication.axd' XML External Entity Injection
Posted by deepcore under Security (No Respond)
[webapps] webERP 4.15.1 – Unauthenticated Backup File Access
Posted by deepcore under Security (No Respond)
[webapps] Online Scheduling System 1.0 – 'username' SQL Injection
Posted by deepcore under Security (No Respond)
[local] Oracle Database 11g Release 2 – 'OracleDBConsoleorcl' Unquoted Service Path
Posted by deepcore under Security (No Respond)
Oracle Database 11g Release 2 – ‘OracleDBConsoleorcl’ Unquoted Service Path
Tags: 0day, remote exploit[webapps] Fishing Reservation System 7.5 – 'uid' SQL Injection
Posted by deepcore under Security (No Respond)
[remote] Saltstack 3000.2 – Remote Code Execution
Posted by deepcore under Security (No Respond)