>> AUTHOR: deepcore

LanWhoIs.exe version 1.0.1.120 suffers from a buffer overflow vulnerability.

Huawei 3G routers suffer from authentication bypass, cross site request forgery, denial of service, and various other vulnerabilities.

Netgear N300 routers suffer from an authentication bypass vulnerability that allows for complete compromise.

Zope Management Interface version 4.3.7 suffers from a cross site request forgery vulnerability.

TestLink version 1.9.13 suffers from a remote SQL injection vulnerability.

TestLink version 1.9.13 suffers from multiple cross site scripting vulnerabilities.

This proof of concept shows a crash that was observed in MS Office 2007 running under Windows 2003 x86. Microsoft Office File Validation Add-In is disabled and application verified was…

Kallithea suffers from a HTTP header injection (response splitting) vulnerability because it fails to properly sanitize user input before using it as an HTTP header value via the GET ‘came_from’…

This Metasploit module exploits a file upload vulnerability in ManageEngine ServiceDesk Plus. The vulnerability exists in the FileUploader servlet which accepts unauthenticated file uploads. This Metasploit module has been tested…

This Metasploit module exploits a stack based buffer overflow in Watermark Master 2.2.23 when processing a specially crafted .WCF file. This vulnerability could be exploited by a remote attacker to…