>> CATEGORY: exploit

qdPM version 9.1 suffers from a remote code execution vulnerability.

Microsoft Windows Media Center is affected by an issue that allows malicious people to bypass the current security standards. The issue can be exploited through specially crafted wma or wmv…

ManageEngine Network Configuration Manager version 12.2 suffers from a remote SQL injection vulnerability in apiKey.

This is a proof of concept for CVE-2018-8413 where the Microsoft Windows Theme API had a file parsing vulnerability.

Park Ticketing Management System version 1.0 suffers from a persistent cross site scripting vulnerability.

This application, known as the SolarWinds n-Central Dumpster Diver, utilizes the nCentral agent dot net libraries to simulate the agent registration and pull the agent/appliance configuration settings. This information can…

KeePass version 2.44 suffers from a denial of service vulnerability.

ECTouch ECShop version 2.7.3 suffers from a remote SQL injection vulnerability.

An insufficient fix for CVE-2019-6205 means XNU vm_map_copy optimization which requires atomicity still is not atomic.

Citrix XenMobile Server version 10.8 suffers from an XML external entity injection vulnerability.