Subscribe via feed.
Archive for June, 2020

We-Com OpenData CMS 2.0 SQL Injection

Posted by deepcore under exploit (No Respond)

We-Com OpenData CMS version 2.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Avast Array.prototype.toString Out-Of-Bounds Copy

Posted by deepcore under exploit (No Respond)

Avast suffers from an out-of-bounds copy vulnerability in Array.prototype.toString.

Packet Storm New Exploits For May, 2020

Posted by deepcore under exploit (No Respond)

This archive contains all of the 166 exploits added to Packet Storm in May, 2020.

[remote] vCloud Director 9.7.0.15498291 – Remote Code Execution

Posted by deepcore under Security (No Respond)

vCloud Director 9.7.0.15498291 – Remote Code Execution

Tags: ,

[remote] Microsoft Windows – 'SMBGhost' Remote Code Execution

Posted by deepcore under Security (No Respond)

Microsoft Windows – ‘SMBGhost’ Remote Code Execution

Tags: ,

[webapps] QuickBox Pro 2.1.8 – Authenticated Remote Code Execution

Posted by deepcore under Security (No Respond)

QuickBox Pro 2.1.8 – Authenticated Remote Code Execution

Tags: ,

[webapps] WordPress Plugin BBPress 2.5 – Unauthenticated Privilege Escalation

Posted by deepcore under Security (No Respond)

WordPress Plugin BBPress 2.5 – Unauthenticated Privilege Escalation

Tags: ,