UEFI firmware image viewer and editor: UEFITool

It supports parsing of full BIOS images starting with the flash descriptor or any binary files containing UEFI volumes. Original development was started here at MDL forums as a cross-platform analog to PhoenixTool ‘s structure mode with some additional features, but the program’s engine was prove...

Microsoft Windows VBScript Replace Function Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of memory on applications using the VBScript scripting language on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit this vulnerability ...

Belkin N150 Wireless Home Router Multiple Vulnerabilities (Nov 2015) - Active Check

Belkin N150 Wireless Home Router is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Python 2.7 strop.replace() Integer Overflow

Title: Python 2.7 strop.replace Integer Overflow Credit: John Leitch [email protected] Url1: http://autosectools.com/Page/Python-strop-replace-Integer-Overflow Url2: http://bugs.python.org/issue24708 Resolution: Fixed The Python 2.7 strop.replace method suffers from an integer overflow that c...

The vulnerability of the Ubuntu operating system allows a hacker to use a mirror server to replace the disk images.

The vulnerability of the Simple Streams library is related to errors in the process of checking GPG signatures for disk image files. Exploiting this vulnerability allows a malicious actor, operating remotely, to use a mirrored server to replace disk images through an HTTP response with an "403"...

Memory corruption

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted replace operation with a JavaScript regular expressio...

CVE-2015-2482

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted replace operation with a JavaScript regular expressio...

The vulnerability of the Firefox browser, which allows a hacker to replace the window’s content

The vulnerability of Firefox browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to replace the window’s content using a specially crafted web page...

The vulnerability of the iOS operating system allows a hacker to use the contacts in the address book to replace the sender’s address in the email.

The vulnerability of the Mail component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to use contacts in the address book to replace the sender’s address in emails sent from the device...

The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.

The vulnerability of the Safari browser’s user interface on the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a web page by changing its URL address...

PT-2015-2135

Name of the Vulnerable Software and Affected Versions Safari affected versions not specified Description The issue is related to insufficient input validation in the Safari browser's user interface on the iOS operating system. This could allow a remote attacker to exploit the issue and replace a...

The vulnerabilities in browsers Firefox, Firefox ESR, and the operating system Firefox OS allow attackers to trigger a service failure.

The vulnerability of the nsTSubstring::ReplacePrep function in browsers such as Firefox, Firefox ESR, and the Firefox OS operating system is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

Apple iOS Arbitrary App Extension Replacement Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows enterprise apps to utilize common profile applications to replace extensions for other apps...

CVE-2015-5770

MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app...

PT-2015-1916

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Description The issue is related to the MobileInstallation component in iOS, which has inadequate access control to certain functions. This allows an attacker to replace arbitrary extensions using a crafted...

PyPhisher - A Simple Python Tool for Phishing

If you are looking to make a phishing testing or demonstration you can check PyPhisher. This tool was created for the purpose of phishing during a penetration test. This tool is python based that provide user a way to send emails with a customized template that he design. you can have an html...

Lenovo System Update Download File Replacement Vulnerability

Lenovo System Update is a system upgrade tool for Lenovo. Lenovo System Update system downloads application updates to a writable directory, allowing local users to replace downloaded files and elevate permissions...

Concrete CMS: Self Xss on File Replace

In File manager there is an Replace option to replace files from three resources . 1. from computer 2.incoming 3.Remote files For remote files if we put http://example.com/" in the url box It reflects xss. Poc: https://www.dropbox.com/s/m7pb9wiwxix1oyu/replacexss.mkv?dl=0 Thanks...

DSS TFTP Server <= 1.0 Path Traversal Vulnerability - Active Check

DSS TFTP Server is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2014-8777

Name of the Vulnerable Software and Affected Versions X7 Chat versions 2.0.0 through 2.0.5.1 Description The issue allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to "index.php", which is processed by the preg replace function with the eval switch. This c...