>> CATEGORY: exploit

Easy RM RMVB to DVD Burner version 18.11 buffer overflow exploit.

Matrimony version 2.7 suffers from a cross site request forgery vulnerability.

NethServer version 7.3.1611 suffers from a cross site request forgery script insertion vulnerability in Upload.json.

NethServer version 7.3.1611 suffers from a cross site request forgery vulnerability that allows you to create a user and enable SSH access.

Microsoft Windows suffers from an issue where it is possible to inject code into a PPL protected process by hijacking COM objects leading to accessing PPL processes such as Lsa…

This Metasploit module exploits an unauthenticated remote command injection vulnerability in QNAP NAS devices. The transcoding server listens on port 9251 by default and is vulnerable to command injection using…

The Next Generation of Genealogy Sitebuilding versions prior to 11.1.1 suffer from a remote SQL injection vulnerability.

Backdrop CMS versions 1.7.1 and below suffer from a persistent cross site scripting vulnerability.

WebClientPrint Processor version 2.0.15.109 suffers from a remote code execution vulnerability via print jobs.

RedTeam Pentesting discovered that WebClientPrint Processor (WCPP) does not validate TLS certificates when initiating HTTPS connections. Thus, a man-in-the-middle attacker may intercept and/or modify HTTPS traffic in transit. This may…