Subscribe via feed.
Archive for July, 2021

https://www.forest.go.th/by.html

Posted by deepcore under defacement (No Respond)

https://www.forest.go.th/by.html notified by Mr.Kro0oz.305

Tags:

Safari Zero-Day Used In LinkedIn Campaign

Posted by deepcore under exploit (No Respond)

osCommerce 2.3.4.1 Remote Code Execution

Posted by deepcore under exploit (No Respond)

osCommerce version 2.3.4.1 remote code execution exploit. This is a variant of the original discovery of code execution in this version by Simon Scannell in March of 2018.

WordPress Popular Posts 5.3.2 Shell Upload

Posted by deepcore under exploit (No Respond)

WordPress Popular Posts plugin version 5.3.2 suffers from a remote shell upload vulnerability.

Tor Half-Closed Connection Stream Confusion

Posted by deepcore under exploit (No Respond)

Tor suffers from an issue where half-closed connection tracking ignores layer_hint and due to this, entry/middle relays can spoof RELAY_END cells on half-closed streams, which can lead to stream confusion between OP and exit.

[remote] Aruba Instant 8.7.1.0 – Arbitrary File Modification

Posted by deepcore under Security (No Respond)

Aruba Instant 8.7.1.0 – Arbitrary File Modification

Tags: ,

[webapps] ForgeRock Access Manager/OpenAM 14.6.3 – Remote Code Execution (RCE) (Unauthenticated)

Posted by deepcore under Security (No Respond)

ForgeRock Access Manager/OpenAM 14.6.3 – Remote Code Execution (RCE) (Unauthenticated)

Tags: ,

[local] Argus Surveillance DVR 4.0 – Weak Password Encryption

Posted by deepcore under Security (No Respond)

Argus Surveillance DVR 4.0 – Weak Password Encryption

Tags: ,

[webapps] Seagate BlackArmor NAS sg2000-2000.1331 – Command Injection

Posted by deepcore under Security (No Respond)

Seagate BlackArmor NAS sg2000-2000.1331 – Command Injection

Tags: ,

iOS Zero-Day Let SolarWinds Hackers Compromise iPhones

Posted by deepcore under exploit (No Respond)