Pacosite's Blog

Comunicaciones, Linux, Tecnología e Internet

Horde Groupware Webmail Edition 5.2.22 – PHAR Loading

from Exploit-DB.com RSS Feed https://ift.tt/39W7htH
via IFTTT

Horde Groupware Webmail Edition 5.2.22 – PHP File Inclusion

from Exploit-DB.com RSS Feed https://ift.tt/38NA3Ls
via IFTTT

Necurs, one of the world’s biggest botnets, infected over 9 million computers worldwide.

rConfig 3.9 – ‘searchColumn’ SQL Injection

from Exploit-DB.com RSS Feed https://ift.tt/2wS1HJS
via IFTTT

Can an old APT learn new tricks? Turla’s TTPs are largely unchanged, but the group recently added a Python backdoor.

rConfig 3.93 – ‘ajaxAddTemplate.php’ Authenticated Remote Code Execution

from Exploit-DB.com RSS Feed https://ift.tt/3cU9RBZ
via IFTTT

ASUS AAHM 1.00.22 – ‘asHmComSvc’ Unquoted Service Path

from Exploit-DB.com RSS Feed https://ift.tt/3d1AXYe
via IFTTT

HRSALE 1.1.8 – Cross-Site Request Forgery (Add Admin)

from Exploit-DB.com RSS Feed https://ift.tt/3cTsQwv
via IFTTT

WordPress Plugin Appointment Booking Calendar 1.3.34 – CSV Injection

from Exploit-DB.com RSS Feed https://ift.tt/38HMJn5
via IFTTT

WatchGuard Fireware AD Helper Component 5.8.5.10317 – Credential Disclosure

from Exploit-DB.com RSS Feed https://ift.tt/2vPWh2c
via IFTTT