Subscribe via feed.
Archive for September, 2022

pfBlockerNG 2.1.4_26 Shell Upload

Posted by deepcore under exploit (No Respond)

pfBlockerNG version 2.1.4_26 unauthenticated remote shell upload exploit.

osCommerce Shopping Cart 4 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

osCommerce Shopping Cart version 4 suffers from a cross site scripting vulnerability.

LivelyCart Pro 3 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

LivelyCart Pro version 3 suffers from a cross site scripting vulnerability.

Active eCommerce CMS 6.3.0 Arbitrary File Download

Posted by deepcore under exploit (No Respond)

Active eCommerce CMS version 6.3.0 suffers from an arbitrary file download vulnerability.

Active eCommerce CMS 6.3.0 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Active eCommerce CMS version 6.3.0 suffers from a cross site scripting vulnerability.

Backdoor.Win32.Bingle.b MVID-2022-0643 Hardcoded Credential

Posted by deepcore under exploit (No Respond)

Backdoor.Win32.Bingle.b malware suffers from a hardcoded credential vulnerability.

Backdoor.Win32.Psychward.b MVID-2022-0645 Hardcoded Credential

Posted by deepcore under exploit (No Respond)

Backdoor.Win32.Psychward.b malware suffers from a hardcoded credential vulnerability.

WooCommerce BRW Booking Rental 1.3.1 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WooCommerce plugin BRW Booking Rental version 1.3.1 from Ovatheme suffers from a cross site scripting vulnerability.

Online Diagnostic Lab Management System 1.0 SQL Injection / Shell Upload

Posted by deepcore under exploit (No Respond)

Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell.

WordPress Sabai Discuss 1.4.13 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Sabai Discuss plugin version 1.4.13 suffers from a cross site scripting vulnerability.