Subscribe via feed.
Archive for July, 2020

Apple Security Advisory 2020-07-15-3

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2020-07-15-3 – tvOS 13.4.8 is now available and addresses bypass, code execution, cross site scripting, out of bounds read, out of bounds write, and use-after-free vulnerabilities.

Tags: , ,

Apple Security Advisory 2020-07-15-4

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2020-07-15-4 – watchOS 6.2.8 is now available and addresses bypass, code execution, cross site scripting, out of bounds read, out of bounds write, and use-after-free vulnerabilities.

Tags: , ,

Apple Security Advisory 2020-07-15-5

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2020-07-15-5 – Safari 13.1.2 is now available and addresses bypass, code execution, cross site scripting, out of bounds read, and use-after-free vulnerabilities.

Tags: , ,

Online Course Registration 1.0 Remote Code Execution

Posted by deepcore under exploit (No Respond)

Online Course Registration version 1.0 unauthenticated remote code execution exploit.

Vehicle Parking Management System 1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

Vehicle Parking Management System version 1.0 suffer from multiple remote SQL Injection vulnerabilities, one of which allows for authentication bypass.

Wing FTP Server 6.3.8 Remote Code Execution

Posted by deepcore under exploit (No Respond)

Wing FTP Server version 6.3.8 authenticated remote code execution exploit that leverages the web console.

Infor Storefront B2B 1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

Infor Storefront B2B version 1.0 suffers from a remote SQL injection vulnerability.

Web Based Online Hotel Booking System 0.1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

Web Based Online Hotel Booking System version 0.1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Online Farm Management System 0.1.0 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Online Farm Management System version 0.1.0 suffers from a persistent cross site scripting vulnerability.

[webapps] CMSUno 1.6 – Cross-Site Request Forgery (Change Admin Password)

Posted by deepcore under Security (No Respond)

CMSUno 1.6 – Cross-Site Request Forgery (Change Admin Password)

Tags: ,