Subscribe via feed.

[webapps] OpenEMR 5.0.1.3 – 'manage_site_files' Remote Code Execution (Authenticated)

Posted by deepcore under Security (No Respond)

OpenEMR 5.0.1.3 – ‘manage_site_files’ Remote Code Execution (Authenticated)

Tags: ,

[local] WibuKey Runtime 6.51 – 'WkSvW32.exe' Unquoted Service Path

Posted by deepcore under Security (No Respond)

WibuKey Runtime 6.51 – ‘WkSvW32.exe’ Unquoted Service Path

Tags: ,

[webapps] Small CRM 3.0 – 'Authentication Bypass' SQL Injection

Posted by deepcore under Security (No Respond)

Small CRM 3.0 – ‘Authentication Bypass’ SQL Injection

Tags: ,

[webapps] Stock Management System 1.0 – 'user_id' Blind SQL injection (Authenticated)

Posted by deepcore under Security (No Respond)

Stock Management System 1.0 – ‘user_id’ Blind SQL injection (Authenticated)

Tags: ,

[webapps] OpenEMR 5.0.0 – Remote Code Execution (Authenticated)

Posted by deepcore under Security (No Respond)

OpenEMR 5.0.0 – Remote Code Execution (Authenticated)

Tags: ,

[webapps] Microsoft SharePoint Server 16.0.10372.20060 – 'GetXmlDataFromDataSource' Server-Side Request Forgery (SSRF)

Posted by deepcore under Security (No Respond)

Microsoft SharePoint Server 16.0.10372.20060 – ‘GetXmlDataFromDataSource’ Server-Side Request Forgery (SSRF)

Tags: ,

[webapps] Cerberus FTP Web Service 11 – 'svg' Stored Cross-Site Scripting (XSS)

Posted by deepcore under Security (No Respond)

Cerberus FTP Web Service 11 – ‘svg’ Stored Cross-Site Scripting (XSS)

Tags: ,

[webapps] Accela Civic Platform 21.1 – 'servProvCode' Cross-Site-Scripting (XSS)

Posted by deepcore under Security (No Respond)

Accela Civic Platform 21.1 – ‘servProvCode’ Cross-Site-Scripting (XSS)

Tags: ,

[dos] n+otes 1.6.2 – Denial of Service (PoC)

Posted by deepcore under Security (No Respond)

n+otes 1.6.2 – Denial of Service (PoC)

Tags: ,

[dos] Sticky Notes Widget Version 3.0.6 – Denial of Service (PoC)

Posted by deepcore under Security (No Respond)

Sticky Notes Widget Version 3.0.6 – Denial of Service (PoC)

Tags: ,