Detik News- Exploit DB
- [local] HCL Lotus Notes V12 - Unquoted Service Path December 6, 2021HCL Lotus Notes V12 - Unquoted Service Path
- [remote] Auerswald COMpact 8.0B - Privilege Escalation December 6, 2021Auerswald COMpact 8.0B - Privilege Escalation
- [remote] Auerswald COMfortel 2.8F - Authentication Bypass December 6, 2021Auerswald COMfortel 2.8F - Authentication Bypass
- [remote] Auerswald COMpact 8.0B - Arbitrary File Disclosure December 6, 2021Auerswald COMpact 8.0B - Arbitrary File Disclosure
- [remote] Auerswald COMpact 8.0B - Multiple Backdoors December 6, 2021Auerswald COMpact 8.0B - Multiple Backdoors
- [webapps] Croogo 3.0.2 - Remote Code Execution (Authenticated) December 6, 2021Croogo 3.0.2 - Remote Code Execution (Authenticated)
- [webapps] Online Pre-owned/Used Car Showroom Management System 1.0 - SQLi Authentication Bypass December 3, 2021Online Pre-owned/Used Car Showroom Management System 1.0 - SQLi Authentication Bypass
- [webapps] Online Magazine Management System 1.0 - SQLi Authentication Bypass December 3, 2021Online Magazine Management System 1.0 - SQLi Authentication Bypass
- [webapps] WordPress Plugin All-in-One Video Gallery plugin 2.4.9 - Local File Inclusion (LFI) December 3, 2021WordPress Plugin All-in-One Video Gallery plugin 2.4.9 - Local File Inclusion (LFI)
- [webapps] WordPress Plugin Slider by Soliloquy 2.6.2 - 'title' Stored Cross Site Scripting (XSS) (Authenticated) December 3, 2021WordPress Plugin Slider by Soliloquy 2.6.2 - 'title' Stored Cross Site Scripting (XSS) (Authenticated)
- [webapps] WordPress Plugin DZS Zoomsounds 6.45 - Arbitrary File Read (Unauthenticated) December 3, 2021WordPress Plugin DZS Zoomsounds 6.45 - Arbitrary File Read (Unauthenticated)
- [webapps] Online Enrollment Management System in PHP and PayPal 1.0 - 'U_NAME' Stored Cross-Site Scripting December 1, 2021Online Enrollment Management System in PHP and PayPal 1.0 - 'U_NAME' Stored Cross-Site Scripting
- [local] MilleGPG5 5.7.2 Luglio 2021 - Local Privilege Escalation December 1, 2021MilleGPG5 5.7.2 Luglio 2021 - Local Privilege Escalation
- [webapps] Laundry Booking Management System 1.0 - Remote Code Execution (RCE) November 30, 2021Laundry Booking Management System 1.0 - Remote Code Execution (RCE)
- [webapps] orangescrum 1.8.0 - 'Multiple' SQL Injection (Authenticated) November 29, 2021orangescrum 1.8.0 - 'Multiple' SQL Injection (Authenticated)
- [local] HCL Lotus Notes V12 - Unquoted Service Path December 6, 2021
Category Archives: IT
Menonaktifkan Open DNS Server BIND
Beberapa waktu lalu, tim abuse dari salah satu penyedia VPS (Virtual Private Server) yang saya gunakan meneruskan email komplain ke saya terkait dengan digunakannya server VPS saya sebagai reflektor serangan DDoS ke server di Eropa. Setelah saya cek, ternyata ada … Continue reading
Posted in IT, Security, Tips and Tricks
Leave a comment
[Update] WordPress 0day XSS Vulnerability
Buat teman-teman yang mempunyai website/blog menggunakan wordpress, diharapkan segera melakukan update ke wordpress terbaru 4.2.1 berhubung adanya vulnerability 0day XSS dimana penyerang bisa membuat komentar di post/page manapun dan menyisipkan script XSS yang bisa mendapatkan/eksekusi perintah di server. Referensi bisa … Continue reading
NAWALA Block Yahoo Email MX
Hari ini saya menerima laporan dari teman saya bahwa server emailnya tidak bisa mengirim email ke Yahoo (yang di coba yahoo.com, yang top level domain atau country level domain seperti yahoo.co.id, belum dicoba) sementara ke email server tujuan lain misalnya … Continue reading
Missing DNS kalpin.us di CloudFlare
Pagi ini mendapatkan alert dari google bahwa situs blog pribadi saya http://www.kalpin.us gagal diakses dengan rate diatas 85% dengan error code DNS Not Found. Setelah saya lakukan pengecekan melalui intodns.com, sepertinya ada 2 DNS cloudflare yang diassign ke domain saya … Continue reading
Ngeblog mobile
Mengingat jarang di depan pc untuk update blog, maka diputuskan menginstall wordpress for blackberry. Happy blogging.