Subscribe via feed.
Archive for January, 2022

[webapps] SalonERP 3.0.1 – 'sql' SQL Injection (Authenticated)

Posted by deepcore under Security (No Respond)

SalonERP 3.0.1 – ‘sql’ SQL Injection (Authenticated)

Tags: ,

[webapps] Hospitals Patient Records Management System 1.0 – 'room_list' Stored Cross Site Scripting (XSS)

Posted by deepcore under Security (No Respond)

Hospitals Patient Records Management System 1.0 – ‘room_list’ Stored Cross Site Scripting (XSS)

Tags: ,

[webapps] Hospitals Patient Records Management System 1.0 – 'doctors' Stored Cross Site Scripting (XSS)

Posted by deepcore under Security (No Respond)

Hospitals Patient Records Management System 1.0 – ‘doctors’ Stored Cross Site Scripting (XSS)

Tags: ,

[webapps] Hospitals Patient Records Management System 1.0 – 'room_types' Stored Cross Site Scripting (XSS)

Posted by deepcore under Security (No Respond)

Hospitals Patient Records Management System 1.0 – ‘room_types’ Stored Cross Site Scripting (XSS)

Tags: ,

[webapps] Online Diagnostic Lab Management System 1.0 – SQL Injection (Unauthenticated)

Posted by deepcore under Security (No Respond)

Online Diagnostic Lab Management System 1.0 – SQL Injection (Unauthenticated)

Tags: ,

Microsoft Starts 2022 With Big Bundle Fixes For 96 Security Bugs In Its Software

Posted by deepcore under exploit (No Respond)
Tags:

Microsoft Windows .Reg File Dialog Spoofing / Mitigation Bypass

Posted by deepcore under exploit (No Respond)

Microsoft Windows suffers from a registration file dialog spoofing vulnerability and their last fix to this issue can be bypassed.

Microsoft Windows Defender / Detection Bypass

Posted by deepcore under exploit (No Respond)

Microsoft Windows Defender suffers from a detection bypass vulnerability due to a sub-par mitigation priorly adopted.

Backdoor.Win32.Controlit.10 Code Execution

Posted by deepcore under exploit (No Respond)

Backdoor.Win32.Controlit.10 malware suffers from a code execution vulnerability.

[webapps] WordPress Plugin Frontend Uploader 1.3.2 – Stored Cross Site Scripting (XSS) (Unauthenticated)

Posted by deepcore under Security (No Respond)

WordPress Plugin Frontend Uploader 1.3.2 – Stored Cross Site Scripting (XSS) (Unauthenticated)

Tags: ,