Subscribe via feed.
Archive for March, 2023

Grafana 6.2.4 HTML Injection

Posted by deepcore under exploit (No Respond)

Grafana versions 6.2.4 and below suffer from an html injection vulnerability.

Webgrind 1.1 Cross Site Scripting / Remote Code Execution

Posted by deepcore under exploit (No Respond)

Webgrind version 1.1 suffers from remote code execution and cross site scripting vulnerabilities.

Scdbg 1.0 Denial Of Service

Posted by deepcore under exploit (No Respond)

Scdbg version 1.0 suffers from a buffer overflow vulnerability that can cause a denial of service condition.

Hex Workshop 6.7 Buffer Overflow / Denial Of Service

Posted by deepcore under exploit (No Respond)

Hex Workshop version 6.7 is vulnerable to denial of service via command line file arguments and control of the Structured Exception Handler (SEH) records.

Resource Hacker 3.6.0.92 Buffer Overflow

Posted by deepcore under exploit (No Respond)

Resource Hacker version 3.6.0.92 suffers from a buffer overflow vulnerability.

Frhed 1.6.0 Buffer Overflow

Posted by deepcore under exploit (No Respond)

Frhed version 1.6.0 suffers from a buffer overflow vulnerability.

Explorer32++ 1.3.5.531 Buffer Overflow

Posted by deepcore under exploit (No Respond)

Explorer32++ version 1.3.5.531 suffers from a buffer overflow vulnerability.

Desktop Central 9.1.0 CRLF Injection / Server-Side Request Forgery

Posted by deepcore under exploit (No Respond)

Desktop Central version 9.1.0 suffers from crlf injection, and server-side request forgery vulnerabilities.

Aero CMS 0.0.1 SQL Injection

Posted by deepcore under exploit (No Respond)

Aero CMS version 0.0.1 suffers from multiple remote SQL injection vulnerabilities. Original discovery of this issue in this version is attributed to nu11secur1ty in August of 2022.

Aero CMS 0.0.1 Remote Shell Upload

Posted by deepcore under exploit (No Respond)

Aero CMS version 0.l0.1 remote shell upload exploit. Original discovery of this issue in this version is attributed to D4rkP0w4r in April of 2022.