Subscribe via feed.
Archive for April, 2023

KODExplorer 4.49 Cross Site Request Forgery / Shell Upload

Posted by deepcore under exploit (No Respond)

KODExplorer versions 4.49 and below suffer from cross site request forgery and remote shell upload vulnerabilities.

Nokia OneNDS 17 Insecure Permissions / Privilege Escalation

Posted by deepcore under exploit (No Respond)

Nokia OneNDS 17 has loose sudo permissions that can allow users to escalate privileges.

Nokia OneNDS 20.9 Insecure Permissions / Privilege Escalation

Posted by deepcore under exploit (No Respond)

Nokia OneNDS 20.9 has loose sudo permissions that can allow users to escalate privileges.

http://www.taladnikomprasat.go.th

Posted by deepcore under defacement (No Respond)

http://www.taladnikomprasat.go.th notified by xNot_RespondinGx

Tags:

Serendipity 2.4.0 Shell Upload

Posted by deepcore under exploit (No Respond)

Serendipity version 2.4.0 suffers from a remote shell upload vulnerability.

Serendipity 2.4.0 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Serendipity version 2.4.0 suffers from a cross site scripting vulnerability.

Lilac-Reloaded For Nagios 2.0.8 Remote Code Execution

Posted by deepcore under exploit (No Respond)

Lilac-Reloaded for Nagios version 2.0.l8 remote code execution exploit.

Swagger UI 4.1.3 Critical Information Misrepresentation

Posted by deepcore under exploit (No Respond)

Swagger UI version 4.1.3 user interface misrepresentation of information proof of concept exploit.

Franklin Fueling Systems TS-550 Hash Disclosure / Default Credentials

Posted by deepcore under exploit (No Respond)

Franklin Fueling Systems TS-550 suffers from a password hash disclosure vulnerability.

Piwigo 13.6.0 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

Piwigo version 13.6.0 suffers from a persistent cross site scripting vulnerability.