Subscribe via feed.
Archive for January, 2022

HTTP Commander 3.1.9 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

HTTP Commander version 3.1.9 suffers from a persistent cross site scripting vulnerability.

WordPress Contact Form Entries Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Contact Form Entries plugin versions prior to 1.2.4 suffer from an unauthenticated persistent cross site scripting vulnerability.

Open-AudIT Community 4.2.0 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Open-AudIT Community versions 4.2.0 and below suffer from a cross site scripting vulnerability.

Linux Garbage Collection Memory Corruption

Posted by deepcore under exploit (No Respond)

Linux suffers from a garbage collection memory corruption vulnerability by resurrecting a file reference through RCU.

[local] VUPlayer 2.49 – '.wax' Local Buffer Overflow (DEP Bypass)

Posted by deepcore under Security (No Respond)

VUPlayer 2.49 – ‘.wax’ Local Buffer Overflow (DEP Bypass)

Tags: ,

[webapps] Online Railway Reservation System 1.0 – 'Multiple' Stored Cross Site Scripting (XSS) (Unauthenticated)

Posted by deepcore under Security (No Respond)

Online Railway Reservation System 1.0 – ‘Multiple’ Stored Cross Site Scripting (XSS) (Unauthenticated)

Tags: ,

[webapps] Online Railway Reservation System 1.0 – Admin Account Creation (Unauthenticated)

Posted by deepcore under Security (No Respond)

Online Railway Reservation System 1.0 – Admin Account Creation (Unauthenticated)

Tags: ,

[webapps] HTTP Commander 3.1.9 – Stored Cross Site Scripting (XSS)

Posted by deepcore under Security (No Respond)

HTTP Commander 3.1.9 – Stored Cross Site Scripting (XSS)

Tags: ,

[webapps] Online Railway Reservation System 1.0 – Remote Code Execution (RCE) (Unauthenticated)

Posted by deepcore under Security (No Respond)

Online Railway Reservation System 1.0 – Remote Code Execution (RCE) (Unauthenticated)

Tags: ,

[webapps] Online Railway Reservation System 1.0 – 'id' SQL Injection (Unauthenticated)

Posted by deepcore under Security (No Respond)

Online Railway Reservation System 1.0 – ‘id’ SQL Injection (Unauthenticated)

Tags: ,