Subscribe via feed.
Archive for December, 2022

SAP@ Host Agent Privilege Escalation

Posted by deepcore under exploit (No Respond)

SAP@ Host Agent suffers from a privilege escalation vulnerability.

SAP@ Host Agent Privilege Escalation

Posted by deepcore under exploit (No Respond)

SAP@ Host Agent suffers from a privilege escalation vulnerability.

CANAL+ / Microsoft PlayReady Cryptography Shortcomings / Authorization Bypass

Posted by deepcore under exploit (No Respond)

Security Explorations conducted a security analysis of Microsoft Play Ready content protection technology in the environment of the CANAL+ SAT TV provider. As a result, complete access to movie assets and content keys available in the CANAL+ VOD library could be gained with the use of a fake client device identity. Microsoft and CANAL+ have […]

Trojan-Dropper.Win32.Decay.dxv (CyberGate 1.00.0) MVID-2022-0664 Insecure Proprietary Password Encryption

Posted by deepcore under exploit (No Respond)

Trojan-Dropper.Win32.Decay.dxv (CyberGate 1.00.0) malware suffers from an insecure proprietary password encryption vulnerability.

Judging Management System 1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

Judging Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Judging Management System 1.0 Shell Upload

Posted by deepcore under exploit (No Respond)

Judging Management System version 1.0 a remote shell upload vulnerability.

https://palm.dit.go.th/net.html

Posted by deepcore under defacement (No Respond)

https://palm.dit.go.th/net.html notified by Desktop77N3T

Tags:

http://nongbua.nfe.go.th/ok.htm

Posted by deepcore under defacement (No Respond)

http://nongbua.nfe.go.th/ok.htm notified by Mr. BDKR28

Tags:

Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS

Posted by deepcore under exploit (No Respond)

Delta Electronics DX-2100-L1-CN version 1.5.0.10 suffers from command injection and cross site scripting vulnerabilities.

Delta Electronics DVW-W02W2-E2 2.42 Command Injection

Posted by deepcore under exploit (No Respond)

Delta Electronics DVW-W02W2-E2 version 2.42 suffers from an authenticated command injection vulnerability.