Subscribe via feed.
Archive for November, 2020

Apache Struts 2.5.20 Double OGNL Evaluation

Posted by deepcore under exploit (No Respond)

Apache Struts version 2.5.20 double OGNL evaluation exploit.

http://backoffice.onec.go.th

Posted by deepcore under defacement (No Respond)

http://backoffice.onec.go.th notified by ./Anon666Txploit

Tags:

http://www.nah.go.th/z.php

Posted by deepcore under defacement (No Respond)

http://www.nah.go.th/z.php notified by ./Anon666Txploit

Tags:

http://envfund.onep.go.th/ay.htm

Posted by deepcore under defacement (No Respond)

http://envfund.onep.go.th/ay.htm notified by D3D0T

Tags:

[remote] ZeroLogon – Netlogon Elevation of Privilege

Posted by deepcore under Security (No Respond)

ZeroLogon – Netlogon Elevation of Privilege

Tags: ,

[webapps] BigBlueButton 2.2.25 – Arbitrary File Disclosure and Server-Side Request Forgery

Posted by deepcore under Security (No Respond)

BigBlueButton 2.2.25 – Arbitrary File Disclosure and Server-Side Request Forgery

Tags: ,

[webapps] WordPress Plugin WPForms 1.6.3.1 – Persistent Cross Site Scripting (Authenticated)

Posted by deepcore under Security (No Respond)

WordPress Plugin WPForms 1.6.3.1 – Persistent Cross Site Scripting (Authenticated)

Tags: ,

Advanced System Care Service 13 Unquoted Service Path

Posted by deepcore under exploit (No Respond)

Advanced System Care Service version 13 suffers from an unquoted service path vulnerability.

Pandora FMS 7.0 NG 749 SQL Injection

Posted by deepcore under exploit (No Respond)

Pandora FMS version 7.0 NG 749 suffers from a remote SQL injection vulnerability.

KiteService 1.2020.1113.1 Unquoted Service Path

Posted by deepcore under exploit (No Respond)

KiteService version 1.2020.1113.1 suffers from an unquoted service path vulnerability.