WordPress Smart Marketing SMS and Newsletters Forms plugin version 1.1.1 suffers from a persistent cross site scripting vulnerability.
Source: WordPress Smart Marketing SMS And Newsletters Forms 1.1.1 XSS
The post WordPress Smart Marketing SMS And News…
VirtualBox suffers from a remote code execution vulnerability due to downloading updates over HTTP.
Source: VirtualBox Man-In-The-Middle
The post VirtualBox Man-In-The-Middle appeared first on MondoUnix.
Claymore’s Dual ETH + DCR/SC/LBC/PASC GPU Miner versions 10.1 and below suffer from a stack buffer overflow vulnerability. Source: Claymore’s Dual Miner 10.1 Stack Buffer Overflow
The post Claymore’s Dual Miner 10.1 Stack Buffer Overflow appeared first on MondoUnix.
OpenEMR version 5.0.0 suffers from code execution and cross site scripting vulnerabilities.
Source: OpenEMR 5.0.0 Command Injection / Cross Site Scripting
The post OpenEMR 5.0.0 Command Injection / Cross Site Scripting appeared first on MondoUnix.
This Metasploit module exploits a serious flaw in Mac OS X High Sierra. Any user can login with user “root”, leaving an empty password.
Source: Mac OS X Root Privilege Escalation
The post Mac OS X Root Privilege Escalation appeared first on…
Asterisk version 13.17.2~dfsg-2 suffers from a remote unauthenticated memory exhaustion vulnerability.
Source: Asterisk 13.17.2~dfsg-2 Memory Exhaustion
The post Asterisk 13.17.2~dfsg-2 Memory Exhaustion appeared first on MondoUnix.
Synology StorageManager version 5.2 suffers from a remote root command execution vulnerability in smart.cgi.
Source: Synology StorageManager 5.2 Remote Command Execution
The post Synology StorageManager 5.2 Remote Command Execution appeared first on Mo…
pfSense versions 2.3.1_1 and below contain a remote command execution vulnerability post authentication in the system_groupmanager.php page.
Source: pfSense 2.3.1_1 Remote Command Execution
The post pfSense 2.3.1_1 Remote Command Execution appeared fir…
HikVision Wi-Fi IP cameras come with a default SSID “davinci”, with a setting of no WiFi encryption or authentication. Depending on the firmware version, there is no configuration option within the camera to turn off Wi-Fi. If a camera is deployed via wired ethernet, then the WiFi settings won’t be adjusted, and a rogue AP […]
The post HikVision Wi-Fi IP Camera Wireless Access Point State appeared first on MondoUnix.
There is a directory traversal issue in attachment downloads in Gmail. For non-gmail accounts, there is no path sanitization on the attachment filename in the email, so when attachments are downloaded, a file with any name and any contents can be written to anywhere on the filesystem that the Gmail app can access. Source: Android […]
The post Android Gmail Attachment Download Directory Traversal appeared first on MondoUnix.
