Subscribe via feed.
Archive for January, 2022

Online Resort Management System 1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

Online Resort Management System version 1.0 suffer from remote SQL injection vulnerabilities. Original discovery of SQL injection in this version is attributed to nu11secur1ty on January 10, 2022.

Landa Driving School Management System 2.0.1 Arbitrary File Upload

Posted by deepcore under exploit (No Respond)

Landa Driving School Management System version 2.0.1 suffers from an arbitrary file upload vulnerability.

Archeevo 5.0 Local File Inclusion

Posted by deepcore under exploit (No Respond)

Archeevo version 5.0 suffers from a local file inclusion vulnerability.

[webapps] Affiliate Pro 1.7 – 'Multiple' Cross Site Scripting (XSS)

Posted by deepcore under Security (No Respond)

Affiliate Pro 1.7 – ‘Multiple’ Cross Site Scripting (XSS)

Tags: ,

[webapps] Rocket LMS 1.1 – Persistent Cross Site Scripting (XSS)

Posted by deepcore under Security (No Respond)

Rocket LMS 1.1 – Persistent Cross Site Scripting (XSS)

Tags: ,

[webapps] uDoctorAppointment v2.1.1 – 'Multiple' Cross Site Scripting (XSS)

Posted by deepcore under Security (No Respond)

uDoctorAppointment v2.1.1 – ‘Multiple’ Cross Site Scripting (XSS)

Tags: ,

Worktime 10.20 Build 4967 DLL Hijacking

Posted by deepcore under exploit (No Respond)

Worktime version 10.20 Build 4967 suffers from a dll hijacking vulnerability.

Worktime 10.20 Build 4967 Unquoted Service Path

Posted by deepcore under exploit (No Respond)

Worktime version 10.20 Build 4967 suffers from an unquoted service path vulnerability.

HTTP Protocol Stack Denial Of Service / Remote Code Execution

Posted by deepcore under exploit (No Respond)

Proof of concept for a Microsoft HTTP protocol stack vulnerability that causes a denial of service.

Cisco IP Phone Cleartext Password Storage

Posted by deepcore under exploit (No Respond)

Cisco IP Phone Series 78×1, 88×5, 88×1, 7832, 8832, 8821 and 3905 suffer from an insecure password storage vulnerability.