This archive contains all of the 162 exploits added to Packet Storm in October, 2017.
6df0b6c9fa9b5095c34f144edb026f2fa31bad05bc841f4a50b446c49c89890aWordPress User Login History plugin version 1.5.2 suffers from a cross site scripting vulnerability.
6c3febf1993c19f0a16505de24832a566c3f18364d14acf384da90a87c23b22dProgea Movicon versions 11.5.1181 and below suffer from search path related vulnerabilities.
3c27f46c9c35863630e0bcb760272da150ea550494090d47a78f9257d279eb07SpiderControl SCADA Web Server versions 2.02.0007 and below suffer from an improper privilege management vulnerability.
2378a84eb198ed39fc681076b39d9def7c87bcb0b99d8a1c1eeae425ed47ed97JanTek JTC-200 RS232-NET Connector suffers from cross site request forgery and missing authentication vulnerabilities.
c7609342cf2c7e5053c6d7835d18f3713bed53c9a2e04ffdb132de5d57800d31Website Broker Script suffers from a remote SQL injection vulnerability.
1008f023d20735133678ce895414aae02d18601422947f0bd145a264938f8899Vastal I-Tech Agent Zone suffers from a remote SQL injection vulnerability.
3f5b7a2b9b7f01a7cadcc612a82bc00cb35adf711c3131624b53f1d516e5d380Zomato Clone Script suffers from a remote SQL injection vulnerability.
751c6587f5acca8dc49e0427d6b5ba66ba13c03b4b77bfaaa4b322146d479027PHP Inventory suffers from an arbitrary file upload vulnerability.
5cb053d150b5b12b4075097eb79ac29ed2b5c952892181b4110e7fc3c1835fa2Online Exam Test Application suffers from a remote SQL injection vulnerability.
d1e63c11a3df12015c68150cccfa68f6dbbc1e95760ad97160f791dcd93899cbWordPress Ultimate Product Catalog plugin versions 4.2.24 and below suffer from a PHP object injection vulnerability.
3a32c416cc40f0d2746a5880bfd6ee9b498b22a31a88ccef544429ac5814521eMitraStar DSL-100HN-T1 and GPT-2541GNAC routers suffer from a privilege escalation vulnerability.
5426db97308973a77a4108df438988e172dce98e20172ca1738636474257ce4dThe Android application provided by Private Internet Access (PIA) VPN service can be crashed by downloading a large file containing a list of current VPN servers. This can be exploited by an MITM attacker via intercepting and replacing this file. While the file is digitally signed, it is not served over SSL and the application did not contain logic for checking if the provided file is very large. The vendor has fixed this issue in version 1.3.3.1 and users should install the latest version.
800f549876739334d620586c15f309262e80b5ce74344d37893a980b9345e1e9Tizen Studio version 1.3 Smart Development Bridge versions prior to 2.3.2 buffer overflow proof of concept exploit.
76ab0e7b1cd5ce678ed34550ad310cb3fc9e701de65057b5d08d1ee84d2300ffDameWare Remote Controller versions 12.0.0.520 and below suffer from a remote code execution vulnerability.
4a4c9ff1d9e13aeac05d41ef0fa4e98e4a4c365f635327661de001c1432585c0Watchdog Development Anti-Malware / Online Security Pro version 2.74.186.150 suffers from a NULL pointer dereference vulnerability.
1d1aa46aa3dffca08ad0ae09b967754548443a2f89a9b0f56ed5e4412201f732HitmanPro version 3.7.15 Build 281 kernel pool overflow exploit.
408bf8b107019c5f2a85c3f424fae90139e0c7cc821429e9f874f8e28211b69dPHPMailer versions 5.2.21 and below suffer from a file disclosure vulnerability.
eeaeefcdff3722b2ec1cf3d9459357dc5de426bb7f1c9fb2f39b503acf3a27d4Mura CMS versions prior to 6.2 suffer from server-side request forgery and XML external entity injection vulnerabilities.
c741fa594f6ecdac9c58e2a524f6ef11f7b20005c381775459dc8b4332c6578dFS Shutter Stock Clone suffers from a remote SQL injection vulnerability.
b03d0d2ae4dbffe3e2a8581d0d8cfe905b13a447a0b904b2b58e281444538f34FS Thumbtack Clone suffers from a remote SQL injection vulnerability.
4676e679078b5d30f8b727ef735fa41aa70c4e777df264bc33615df5b55ff764FS Trademe Clone suffers from a remote SQL injection vulnerability.
2c7628a451f7e42509025ee13ccb7d4cab819c455ff2513dacc9b5a2ba24788aFS Monster Clone suffers from a remote SQL injection vulnerability.
ee5a6e1e75975e5578c4906c309a34c30b53ea2ecf3c72b2cc19e80b87d4e1daFS Care Clone suffers from a remote SQL injection vulnerability.
97cd6706ff38ead6bbb290b2a4228364e62e6c2bdb44699e2f2fee01a5b87303FS Crowdfunding Script suffers from a remote SQL injection vulnerability.
2fcfe6b3957e9208e9d07c8d948a930167e2a1720cc80433b922a6e8ce6fb09b
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed