Subscribe via feed.
Archive for October, 2021

Cmder Console Emulator 1.3.18 Denial Of Service

Posted by deepcore under exploit (No Respond)

Cmder Console Emulator version 1.3.18 suffers from a denial of service vulnerability.

https://www.samtambon.go.th/silence.html

Posted by deepcore under defacement (No Respond)

https://www.samtambon.go.th/silence.html notified by Unknown Al

Tags:

http://www.phichit.go.th/wh.html

Posted by deepcore under defacement (No Respond)

http://www.phichit.go.th/wh.html notified by Mr.Kro0oz.305

Tags:

Google SLO-Generator 2.0.0 Code Execution

Posted by deepcore under exploit (No Respond)

Google SLO-Generator versions 2.0.0 and below suffer from a code execution vulnerability.

Online DJ Booking Management System 1.0 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Online DJ Booking Management System version 1.0 suffers from a cross site scripting vulnerability.

Simple Online College Entrance Exam System 1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

Simple Online College Entrance Exam System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Online Traffic Offense Management System 1.0 Shell Upload

Posted by deepcore under exploit (No Respond)

Online Traffic Offense Management System version 1.0 suffers from multiple remote shell upload vulnerabilities.

Online Traffic Offense Management System 1.0 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Online Traffic Offense Management System version 1.0 suffers from persistent and reflective cross site scripting vulnerabilities.

Online Traffic Offense Management System 1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

Online Traffic Offense Management System version 1.0 suffers from multiple unauthenticated remote SQL injection vulnerabilities. Original discovery of SQL injection in this version is attributed to Justin White in August of 2021.

Netfilter x_tables Heap Out-Of-Bounds Write / Privilege Escalation

Posted by deepcore under exploit (No Respond)

A heap out-of-bounds write affecting Linux since version 2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a denial of service (via heap memory corruption) through user name space. Kernels up to and including 5.11 are vulnerable.