Xc0re Blog will be back, very soon . (07/12/2016)
Update: 2017 => You can find latest posts here… https://www.xc0re.net
Advertisements
September 25, 2012
Will be back soon
About 0x90
Packet Storm Security- Sharetronix CMS 3.6.2 Cross Site Request Forgery May 26, 2018Sharetronix CMS version 3.6.2 suffers from a cross site request forgery vulnerability.
- EasyService Billing 1.0 CSRF / XSS / SQL Injection May 26, 2018EasyService Billing version 1.0 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
- Employee Work Schedule 5.9 SQL Injection May 26, 2018Employee Work Schedule version 5.9 suffers from a remote SQL injection vulnerability.
- easyLetters 1.0 SQL Injection May 26, 2018easyLetters version 1.0 suffers from a remote SQL injection vulnerability.
- mySurvey 1.0 SQL Injection May 26, 2018mySurvey version 1.0 suffers from a remote SQL injection vulnerability.
- Ajax Full Featured Calendar 2.0 SQL Injection May 26, 2018Ajax Full Featured Calendar version 2.0 suffers from a remote SQL injection vulnerability.
- Ruckus (Brocade) ICX7450-48 Reflected Cross Site Scripting May 25, 2018Ruckus (Brocade) ICX7450-48 web application has a reflected cross site scripting vulnerability. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected site and allow the attacker to access sensitive browser-based information.
- Microsoft Windows Paint Security Feature Bypass / Unsafe File Creation May 25, 2018Microsoft Windows Paint suffers from security feature bypass and unsafe file creation vulnerabilities.
- Windscribe 1.81 Code Execution May 25, 2018The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe system process that establishes a \\.\pipe\WindscribeService named pipe endpoint that allows the Windscribe VPN process to connect and execute an OpenVPN process or other processes (like taskkill, etc.). There is no validation of the program […]
- Oracle WebCenter (Fatwire) Improper Access Control May 25, 2018Oracle WebCenter (Fatwire) Content Server versions prior to 7 suffer from an improper access control vulnerability.
- Sharetronix CMS 3.6.2 Cross Site Request Forgery May 26, 2018
- Bugtraq
- [SECURITY] [DSA 4209-1] thunderbird security update May 25, 2018
- [SECURITY] [DSA 4210-1] xen security update May 25, 2018
- Ruckus (Brocade) ICX7450-48 Reflected Cross Site Scripting May 25, 2018
- Android OS Didnt use FLAG_SECURE for Sensitive Settings [CVE-2017-13243] May 25, 2018
- PHP Login & User Management May 24, 2018
- [security bulletin] MFSBGN03808 rev.1 - Micro Focus UCMDB, Cross-Site Scripting May 23, 2018
Advertisements
Leave a Reply