Subscribe via feed.
Archive for February, 2022

[remote] WAGO 750-8212 PFC200 G2 2ETH RS – Privilege Escalation

Posted by deepcore under Security (No Respond)

WAGO 750-8212 PFC200 G2 2ETH RS – Privilege Escalation

Tags: ,

[local] Cobian Backup Gravity 11.2.0.582 – 'CobianBackup11' Unquoted Service Path

Posted by deepcore under Security (No Respond)

Cobian Backup Gravity 11.2.0.582 – ‘CobianBackup11’ Unquoted Service Path

Tags: ,

[local] Cobian Backup 11 Gravity 11.2.0.582 – 'Password' Denial of Service (PoC)

Posted by deepcore under Security (No Respond)

Cobian Backup 11 Gravity 11.2.0.582 – ‘Password’ Denial of Service (PoC)

Tags: ,

[local] Cobian Reflector 0.9.93 RC1 – 'Password' Denial of Service (PoC)

Posted by deepcore under Security (No Respond)

Cobian Reflector 0.9.93 RC1 – ‘Password’ Denial of Service (PoC)

Tags: ,

[webapps] Cipi Control Panel 3.1.15 – Stored Cross-Site Scripting (XSS) (Authenticated)

Posted by deepcore under Security (No Respond)

Cipi Control Panel 3.1.15 – Stored Cross-Site Scripting (XSS) (Authenticated)

Tags: ,

[webapps] Casdoor 1.13.0 – SQL Injection (Unauthenticated)

Posted by deepcore under Security (No Respond)

Casdoor 1.13.0 – SQL Injection (Unauthenticated)

Tags: ,

Dahua ToolBox 1.010.0000000.0 DLL Hijacking

Posted by deepcore under exploit (No Respond)

Dahua ToolBox version 1.010.0000000.0 suffers from a dll hijacking vulnerability.

Technitium Installer 4.4 DLL Hijacking

Posted by deepcore under exploit (No Respond)

Technitium Installer version 4.4 suffers from a dll hijacking vulnerability.

WordPress Photoswipe Masonry Gallery 1.2.14 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Photoswipe Masonry Gallery plugin version 1.2.14 suffers from a persistent cross site scripting vulnerability.

Bank Management System 1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

Bank Management System version 1.0 suffers from a remote SQL injection vulnerability.