Online Shopping System Advanced 1.0 SQL Injection
Posted by deepcore under exploit (No Respond)
Online Shopping System Advanced version 1.0 suffers from multiple remote SQL injection vulnerabilities.
Archive for October, 2022
Linux munmap() Race Condition / Use-After-Free
Posted by deepcore under exploit (No Respond)
Linux has an issue with munmap() racing with pagemap_read() that leads to a page use-after-free vulnerability.
WordPress Zephyr Project Manager 3.2.42 SQL Injection
Posted by deepcore under exploit (No Respond)
WordPress Zephyr Project Manager plugin version 3.2.42 suffers from a remote SQL injection vulnerability.
Joomla Vik Booking 1.15.0 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Joomla Vik Booking extension version 1.15.0 suffers from a cross site scripting vulnerability.
Joomla JoomBri Freelance 4.5.0 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Joomla JoomBri Freelance extension version 4.5.0 suffers from a cross site scripting vulnerability.
Joomla JoomBri Careers 3.3.0 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Joomla JoomBri Careers extension version 3.3.0 suffers from a cross site scripting vulnerability.
Linux 3.19 anon_vma Use-After-Free
Posted by deepcore under exploit (No Respond)
Linux suffers from an anon_vma use-after-free vulnerability through the bogus merge of VMAs caused by double-reuse of leaf anon_vma because of ->degree misinterpretation.
Joomla KSAdvertiser 2.5.37 Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Joomla KSAdvertiser extension version 2.5.37 suffers from a cross site scripting vulnerability.
http://ped.go.th
Posted by deepcore under defacement (No Respond)
http://ped.go.th notified by ByME
Tags: defacementhttps://www.lripeo.go.th/robots.txt
Posted by deepcore under defacement (No Respond)
https://www.lripeo.go.th/robots.txt notified by ByME
Tags: defacement