Exponent CMS 2.0.2 File Disclosure

File disclosure vulnerability in Exponent CMS download.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Newscoop RFI

type a short description of the vulnerability here Vulnerability Type: Remote File Include For the exploit source code contact DSquare Security sales team...

Phpmyadmin File Upload

Phpmyadmin config file code injection setup.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Webmatic SQL Injection

Webmatic SQL Injection HTTPREFERER Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Mantisbt < 1.2.4 LFI

LFI on admin/upgradeunattended.php via dbtype Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Apache-Struts ParameterInterceptor < 2.3.1.2 RCE Linux

Apache-Struts2 / OpenSymphony-Xwork RCE Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Arms Race In Zero Days Spells Trouble For Privacy, Public Safety

Editor’s Note: This is the second of a two-part podcast with independent security researcher Chris Soghoian. In the first part of our podcast with independent security researcher Chris Soghoian, we talked about the way that the proliferation of “free” applications have forced consumers into the...

Lenovo ThinkManagement Console 9.0.3 File Upload

File upload vulnerability in Lenovo ThinkManagement Console Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

OneForum SQL Injection

OneForum SQL injection via id Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

phpMoneyBooks LFI

LFI in index.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

WordPress Theme Tuner 0.7 RFI

Remote file include vulnerability in WordPress Theme Tuner plugin Vulnerability Type: Remote File Include For the exploit source code contact DSquare Security sales team...

Snort Report 1.3.2 RCE

Remote command execution vulnerability in Snort Report nmap.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Dolphin 7.0.7 RCE

Remote command execution vulnerability in Dolphin bubbles parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Family connections CMS 2.7.1 RCE (Linux)

Remote command execution vulnerability in Family connections CMS in /dev/less.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Drupal AES encryption File Disclosure

Information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Vmware Server File Disclosure

Directory traversal vulnerability Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

RedHat JBoss File Disclosure

File Disclosure Vulnerability Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Seportal SQLi

Blind SQL injection in redirect.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Chaouki Bekrar: The Man Behind the Bugs

VANCOUVER–Say what you will about Chaouki Bekrar, but the man is nothing if not frank. Bekrar, who is the public face of the VUPEN team that has been toying with the Pwn2Own contest this week, has become a lightning rod in the debate over exploit sales, and from all outward appearances, he couldn...

An End to Offensive Security Research? Unlikely

Many industries tend to run in identifiable cycles. Financial services, the auto industry, entertainment–they all have cycles. Because the security industry isn’t nearly as old as any of these, it hasn’t had much of a chance to establish such cycles. But one seems to be appearing now in the form ...