#windows

Cisco Talos is disclosing a new threat called “DragonRank” that primarily targets countries in Asia and a few in Europe, operating PlugX and BadIIS for search engine optimization (SEO) rank manipulation.

Proof of concept code for the Microsoft Windows DWM Core library elevation of privilege vulnerability. The researcher shows how they reversed the patch, how the heap overflow is produced, and overall gives a complete walk through of their process.

PPDB version 2.4-update 6118-1 suffers from a remote blind SQL injection vulnerability.

POMS version 1.0 suffers from an ignored default credential vulnerability.

Pharmacy Management System version version 1.0 suffers from an ignored default credential vulnerability.

PDF Generator Web Application version 1.0 suffers from an ignored default credential vulnerability.

Park Ticketing Project version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Online Travel Agency System version 1.0 suffers from an ignored default credential vulnerability.

Online Tours and Travels Management System version 1.0 suffers from an ignored default credential vulnerability.

Online Survey System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.