Simple Employee Records System 1.0 – File Upload RCE (Unauthenticated)
Simple Employee Records System 1.0 – File Upload RCE (Unauthenticated)
http://sahathat.go.th/obec/web1/file_editor/logs.txt notified by SeRaVo BlackHaT
SpotAuditor version 5.3.5 suffers from a denial of service vulnerability.
Backdoor.Win32.Agent.xs malware suffers from an insecure permissions vulnerability.
LogonExpert version 8.1 suffers from an unquoted service path vulnerability.
Softros LAN Messenger version 9.6.4 suffers from an unquoted service path vulnerability.
SLMail version 5.1.0.4420 remote code execution exploit.
Microsoft Exchange Server has a flaw that exists within the HasValidCanary function inside of the Canary15 class. The issue results in an insecure generation of cross site request forgery tokens…
VMware vCenter version 6.5 and 7.0 remote code execution proof of concept exploit.
Backdoor.Win32.Agent.xw malware suffers from denial of service and null pointer vulnerabilities.