Backdoor.Win32.LanaFTP.k Heap Corruption
Posted by deepcore under exploit (No Respond)
Backdoor.Win32.LanaFTP.k malware suffers from a heap corruption vulnerability.
Archive for October, 2021
Plastic SCM 10.0.16.5622 Improper Access Control
Posted by deepcore under exploit (No Respond)
Plastic SCM version 10.0.16.5622 suffers from an improper access control vulnerability that lets an attacker set the administrative password.
[webapps] Company's Recruitment Management System 1.0 – 'Add New user' Cross-Site Request Forgery (CSRF)
Posted by deepcore under Security (No Respond)
Company’s Recruitment Management System 1.0 – ‘Add New user’ Cross-Site Request Forgery (CSRF)
Tags: 0day, remote exploit[webapps] Plastic SCM 10.0.16.5622 – WebAdmin Server Access
Posted by deepcore under Security (No Respond)
[webapps] Support Board 3.3.4 – 'Message' Stored Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
[webapps] Company's Recruitment Management System 1.0 – 'description' Stored Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
Company’s Recruitment Management System 1.0 – ‘description’ Stored Cross-Site Scripting (XSS)
Tags: 0day, remote exploit[webapps] Mitsubishi Electric & INEA SmartRTU – Reflected Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
Mitsubishi Electric & INEA SmartRTU – Reflected Cross-Site Scripting (XSS)
Tags: 0day, remote exploit[webapps] Mitsubishi Electric & INEA SmartRTU – Source Code Disclosure
Posted by deepcore under Security (No Respond)
[webapps] WordPress Plugin Duplicator 1.3.26 – Unauthenticated Arbitrary File Read
Posted by deepcore under Security (No Respond)
[webapps] Company's Recruitment Management System 1.0. – 'title' Stored Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
Company’s Recruitment Management System 1.0. – ‘title’ Stored Cross-Site Scripting (XSS)
Tags: 0day, remote exploit
