Trojan-Spy.Win32.WinSpy.vwl Insecure Permissions
Posted by deepcore under exploit (No Respond)
Trojan-Spy.Win32.WinSpy.vwl malware suffers from an insecure permissions vulnerability.
Archive for February, 2021
Alt-N MDaemon Webmail 20.0.0 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Alt-N MDaemon webmail version 20.0.0 suffers from multiple cross site scripting vulnerabilities.
Backdoor.Win32.Wollf.15 Missing Authentication
Posted by deepcore under exploit (No Respond)
Backdoor.Win32.Wollf.15 malware suffers from a missing authentication vulnerability.
Millewin 13.39.028 Unquoted Service Path / Insecure Permissions
Posted by deepcore under exploit (No Respond)
Millewin version 13.39.028 suffers from a local privilege escalation issue due to insecure permission and unquoted service path vulnerabilities.
SmartFoxServer 2X 2.17.0 God Mode Console WebSocket Cross Site Scripting
Posted by deepcore under exploit (No Respond)
SmartFoxServer 2X version 2.17.0 suffers from a God Mode Console cross site scripting vulnerability.
Unibox Cross Site Request Forgery
Posted by deepcore under exploit (No Respond)
Various Unibox products suffers from a cross site request forgery vulnerability.
SmartFoxServer 2X 2.17.0 Credential Disclosure
Posted by deepcore under exploit (No Respond)
SmartFoxServer 2X version 2.17.0 suffers from a credential disclosure vulnerability.
Unibox 2.4 CSRF / Remote Code Execution
Posted by deepcore under exploit (No Respond)
Unibox version 2.4 suffers from remote code execution and cross site request forgery vulnerabilities.
SmartFoxServer 2X 2.17.0 Remote Code Execution
Posted by deepcore under exploit (No Respond)
SmartFoxServer 2X version 2.17.0 suffers from a God Mode Console remote code execution vulnerability.
Adobe Connect 10 Username Disclosure
Posted by deepcore under exploit (No Respond)
Adobe Connect 10 suffers from a username disclosure vulnerability.