2175 matches found
Bugs in Arris Modems Distributed by AT&T Vulnerable to Trivial Attacks
Trivially exploitable vulnerabilities have been discovered in several Arris home modems, routers and gateways distributed to consumers and small businesses through AT&T’s U-verse service. It’s unknown yet whether the firmware vulnerabilities were introduced by the OEM or the ISP since AT&T seems ...
Open WAN-to-LAN proxy on AT&T routers
The Arris NVG589 and NVG599 routers configured with AT&T U-verse firmware 9.2.2h0d83 expose an un-authenticated proxy that allows connecting from WAN to LAN by MAC address. Module Options msf use auxiliary/scanner/wproxy/att/openproxy msf undefinedopenproxy show actions ...actions... msf...
SQL injection vulnerability in gsjj.php page t parameter of Olekai website builder system
Olekai website builder is a website editing, designing and other website building system. There is a SQL injection vulnerability in the t parameter in the gsjj.php page of the Olekai website builder system, which can be exploited by an attacker to obtain sensitive information from the database...
Hack with Metasploit: Announcing the UNITED 2017 CTF
Got mad skillz? Want mad skillz? This year at Rapid7s annual UNITED Summit, were hosting a first-of-its-kind Capture the Flag CTF competition. Whether youre a noob to hacking or a grizzled pro, youll emerge from our 25-hour CTF with more knowledge and serious bragging rights. Show off your 1337...
Multiple Reflective Cross-Site Scripting Vulnerabilities in Treehole Outbound Linking System
Treehole external chain system is a free and open source PHP external chain network disk system, support for seven cattle, local, remote three kinds of storage methods, support for multi-user system. TreeHole Outbound Linking System '\content\common\vplayer.php' and '\views\error.php' files have...
Red-Gate SQL Monitor 3.10 4.2 - Authentication Bypass
Red-Gate SQL Monitor 3.10 4.2 - Authentication Bypass Exploit Title: Red-Gate SQL Monitor authentication bypass Version: Redgate SQL Monitor before 3.10 and 4.x before 4.2 Date: 2017-08-10 Red-Gate made a security announcement and publicly released the fixed version more than two years before thi...
t-coffee ~/.t_coffee out-of-bounds write vulnerability
t-coffee is a multiple alignment tool for calculating and evaluating the sequence and structure of DNA, RNA and proteins. A security vulnerability exists in versions prior to t-coffee 11.00.8cbe486-2. A local attacker could exploit the vulnerability to write to a file...
CVE-2015-8621
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
CVE-2015-8621
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
Code injection
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
UBUNTU-CVE-2015-8621
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
DEBIAN-CVE-2015-8621
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
CVE-2015-8621
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
CVE-2015-8621
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
CVE-2015-8621
t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...
CVE-2015-8621
The vulnerability CVE-2015-8621 affects the t-coffee tool (versions before 11.00.8cbe486-2). It is an out-of-bounds/write vulnerability that allows a local attacker to write to the user’s home file: ~/.t_coffee, i.e., a local write to a user file globally. Impact is confined to local access; expl...
CVE-2017-11394
Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG 12 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544...
Gas Pump Skimmer Sends Card Data Via Text
Skimming devices that crooks install inside fuel station gas pumps frequently rely on an embedded Bluetooth component allowing thieves to collect stolen credit card data from the pumps wirelessly with any mobile device. The downside of this approach is that Bluetooth-based skimmers can be detecte...
t-timez.com XSS vulnerability
Vulnerable URL: http://www.t-timez.com/clubs/newMember.asp?Operation=1"...
captiveaire.com XSS vulnerability
Open Bug Bounty ID: OBB-255955 Description| Value ---|--- Affected Website:| captiveaire.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...