4184 matches found
Microsoft Compiled HTML Help Uncompiled .chm File - XML External Entity Injection
Microsoft Compiled HTML Help Uncompiled .chm File - XML External Entity Injection + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-HTML-HELP-UNCOMPILED-CHM-FILE-XML-EXTERNAL-ENTITY-INJECTION.txt + ISR:...
Open-source Ticket Request System Help Desk Privilege Vulnerability
Open-source Ticket Request System OTRS is an open-source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the...
Microsoft Compiled HTML Help / Uncompiled .chm File - XML External Entity Injection
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-HTML-HELP-UNCOMPILED-CHM-FILE-XML-EXTERNAL-ENTITY-INJECTION.txt + ISR: ApparitionSec Vendor www.microsoft.com Product Microsoft Compiled HTML Help "hh.exe"...
DEBIAN-CVE-2019-1010305
libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmdreadheaders in libmspackfile libmspack/mspack/chmd.c. The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit...
ALPINE-CVE-2019-1010305
libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmdreadheaders in libmspackfile libmspack/mspack/chmd.c. The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit...
MAC Receiver/Workspace app sporadically closes
Customer's will start a published application or desktop and at random intervals the Viewer application will close with no errors or messages. This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and ca...
Slackor - A Golang Implant That Uses Slack As A Command And Control Server
A Golang implant that uses Slack as a command and control channel. This project was inspired by Gcat and Twittor. This tool is released as a proof of concept. Be sure to read and understand the Slack App Developer Policy before creating any Slack apps. Setup Note: The server is written in Python ...
trk.questmedia.ru Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting trk.questmedia.ru website and its users. Following...
Tuneclone 2.20 - Local SEH Buffer Overflow Exploit
Exploit for windows platform in category local exploits Exploit Title: TuneClone Local Seh Exploit Date: 19.06.2019 Vendor Homepage: http://www.tuneclone.com/ Software Link: http://www.tuneclone.com/tuneclonesetup.exe Exploit Author: Achilles Tested Version: 2.20 Tested on: Windows XP SP3 EN 1.-...
Support Board - Chat And Help Desk | Support & Chat <= 1.2.8 Stored XSS
Info: Weak security measures like bad textarea data filtering has been discovered in the «Support Board - Chat And Help Desk | Support & Chat». Demo Website: https://codecanyon.net/item/support-board-chat-and-help-desk/20752085 Backend: https://board.support/desk-demo/?login=true Login / Password...
Support Board - Chat And Help Desk | Support & Chat <= 1.2.8 Stored XSS
Info: Weak security measures like bad textarea data filtering has been discovered in the «Support Board - Chat And Help Desk | Support & Chat». Demo Website: https://codecanyon.net/item/support-board-chat-and-help-desk/20752085 Backend: https://board.support/desk-demo/?login=true Login / Password...
Failed to launch ICA file after upgrade to Citrix Receiver for Windows 4.9 LTSR CU6 on Windows server
After upgrade to Citrix Receiver for Windows 4.9 LTSR CU6 on Windows 2008R2/2012 end point, user is not able to launch any published resource due to wfica32.exe crashed with bugcheck code 0xc0000135. The following error might be popped-up: Unable to launch your applicationContact your help desk a...
Failed to launch session "session_name". Error code: 2501 on Citrix Workspace App During App/Desktop Launch
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error is returned by the Citrix Gateway to Citrix CWA app when application/desktop...
CVE-2016-8897: Improper Neutralization of Special Elements used in an SQL Command
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php...
OSIF - Open Source Information Facebook
OSIF is an accurate facebook account information gathering, all sensitive information can be easily gathered even though the target converts all of its privacy to only me, Sensitive information about residence, date of birth, occupation, phone number and email address. Installation $ pkg update...
SUSE SLED15 / SLES15 Security Update : cf-cli (SUSE-SU-2019:1220-1)
"This update for cf-cli fixes the following issues : cf-cli was updated: to version 6.43.0 bsc1132242 Enhancements : cf curl supports a new --fail flag primarily for scripting purposes which returns exit code 22 for server errors story Improves cf delete-orphaned-routes such that it uses a...
Description of the security update for SharePoint Foundation 2010: May 14, 2019
Description of the security update for SharePoint Foundation 2010: May 14, 2019 Summary This security update resolves a spoofing vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To learn more abo...
Shopify: help.shopify.com Cross Site Scripting
Hello Security Team. Tested windows 10 and edge Microsoft Edge 44.17763.1.0 , internet explorer Test Url : https://help.shopify.com/it/partners/resources/marketing-pack-for-accountants Payload: ?v0sjx'-alert1-'uyvvr=1 Proof Url: Open Url: edge , internet explorer , click me "Condividi il tuo...
MailCarrier 2.51 HELP Remote Buffer Overflow Exploit
!/usr/bin/python Exploit Title: MailCarrier 2.51 - Remote Buffer Overflow in "HELP" commandSMTP Exploit Author: Vinaykumar Yennam and Dheepshika Raghunathan Vendor Homepage: https://www.tabslab.com/ Version: 2.51 Software Link: N.A Tested on: Windows XP Prof SP3 ENG x86 CVE: TBC from Mitre Create...
