Subscribe via feed.
Archive for April, 2022

Email-Worm.Win32.Pluto.b Insecure Permissions

Posted by deepcore under exploit (No Respond)

Email-Worm.Win32.Pluto.b malware suffers from an insecure permissions vulnerability.

Backdoor.Win32.NinjaSpy.c Authentication Bypass

Posted by deepcore under exploit (No Respond)

Backdoor.Win32.NinjaSpy.c malware suffers from an authentication bypass vulnerability.

Backdoor.Win32.NetCat32.10 Remote Command Execution

Posted by deepcore under exploit (No Respond)

Backdoor.Win32.NetCat32.10 malware suffers from a remote command execution vulnerability.

Backdoor.Win32.NetSpy.10 Remote Command Execution

Posted by deepcore under exploit (No Respond)

Backdoor.Win32.NetSpy.10 malware suffers from a remote command execution vulnerability.

Siemens A8000 CP-8050/CP-8031 SICAM WEB Missing File Download / Missing Authentication

Posted by deepcore under exploit (No Respond)

Siemens A8000 CP-8050/CP-8031 SICAM WEB suffers from denial of service and a missing authentication vulnerability that allows for file download.

Siemens A8000 CP-8050/CP-8031 SICAM WEB Missing File Download / Missing Authentication

Posted by deepcore under exploit (No Respond)

Siemens A8000 CP-8050/CP-8031 SICAM WEB suffers from denial of service and a missing authentication vulnerability that allows for file download.

REDCap Cross Site Scripting

Posted by deepcore under exploit (No Respond)

REDCap versions prior to 11.4.0 suffer from a persistent cross site scripting vulnerability that can be leveraged to escalate privileges.

Online Car Wash Booking System 1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

Online Car Wash Booking System version 1.0 suffers from a remote SQL injection vulnerability.

Online Car Wash Booking System 1.0 Blind SQL Injection

Posted by deepcore under exploit (No Respond)

Online Car Wash Booking System version 1.0 suffers from a remote blind SQL injection vulnerability.

Delta Controls enteliTOUCH 3.40.3935 Cross Site Request Forgery

Posted by deepcore under exploit (No Respond)

Delta Controls enteliTOUCH versions 3.40.3935, 3.40.3706, and 3.33.4005 suffer from a cross site request forgery vulnerability.