Subscribe via feed.
Archive for July, 2021

Backdoor.Win32.Zombam.l Code Execution

Posted by deepcore under exploit (No Respond)

Backdoor.Win32.Zombam.l malware suffers from a code execution vulnerability.

OpenEMR 5.0.1.7 Path Traversal

Posted by deepcore under exploit (No Respond)

OpenEMR version 5.0.17 path traversal exploit.

Backdoor.Win32.WinShell.40 Authentication Bypass / Command Execution

Posted by deepcore under exploit (No Respond)

Backdoor.Win32.WinShell.40 malware suffers from authentication bypass and command execution vulnerabilities.

WordPress WP Learn Manager 1.1.2 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress WP Learn Manager plugin version 1.1.2 suffers from a persistent cross site scripting vulnerability.

Virus.Win32.Shodi.e Insecure Transit

Posted by deepcore under exploit (No Respond)

Virus.Win32.Shodi.e malware suffers from an insecure transit vulnerability.

WordPress Backup Guard 1.5.8 Shell Upload

Posted by deepcore under exploit (No Respond)

WordPress Backup Guard plugin version 1.5.8 remote shell upload exploit.

Virus.Win32.Shodi.e Remote Command Execution

Posted by deepcore under exploit (No Respond)

Virus.Win32.Shodi.e malware suffers from a remote command execution vulnerability.

Simple Client Management System 1.0 SQL Injection / Shell Upload

Posted by deepcore under exploit (No Respond)

Simple Client Management System version 1.0 shell upload exploit that leverages SQL injection.

Virus.Win32.Shodi.e Heap Corruption

Posted by deepcore under exploit (No Respond)

Virus.Win32.Shodi.e malware suffers from a heap corruption vulnerability.

Ricon Industrial Cellular Router S9922XL Remote Command Execution

Posted by deepcore under exploit (No Respond)

Ricon Industrial Cellular Router S9922XL suffers from an authenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands as the admin (root) user via the ping_server_ip POST parameter. It is also vulnerable to Heartbleed.