HID discoveryd - 'command_blink_on' Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HID discoveryd commandblinkon Unauthenticated RCE', 'Description' = %q This module exploits an unauthenticated remote command execution...

Fatek Automation PLC WinProladder 3.11 Build 14701 - Stack Buffer Overflow (Metasploit)

Fatek Automation PLC WinProladder 3.11 Build 14701 - Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'Fatek Automation PLC WinProladder Stack-based Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Fatek Automation PLC...

financialcenter.com Open Redirect vulnerability

Vulnerable URL: http://www.financialcenter.com/ads/redirect.php?target=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 3867983 VIP website...

yanbu1.com Open Redirect vulnerability

Vulnerable URL: http://www.yanbu1.com/vb/redirector.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 322345 VIP website status:| No Che...

Phoenix Exploit Kit Remote Code Execution

This module exploits a Remote Code Execution in the web panel of Phoenix Exploit Kit via geoip.php. The Phoenix Exploit Kit is a popular commercial crimeware tool that probes the browser of the visitor for the presence of outdated and insecure versions of browser plugins like Java and Adobe Flash...

n2u.no XSS vulnerability

Vulnerable URL: http://www.n2u.no/webmail/index.php?femail=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19451255 VIP website...

archive.newmuseum.org XSS vulnerability

Vulnerable URL: http://archive.newmuseum.org/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Apache Continuum Arbitrary Command Execution

This module exploits a command injection in Apache Continuum use exploit/linux/http/apache/continuumcmdexec msf undefinedcontinuumcmdexec show actions ...actions... msf undefinedcontinuumcmdexec set ACTION msf undefinedcontinuumcmdexec show options ...show and set options... msf...

breckinridge.com Open Redirect vulnerability

Vulnerable URL: http://www.breckinridge.com/redirect.html?url=https://xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 4147867 Google Pagerank| 4 VIP website...

Apple WatchOS v2.1 - Denial of Service Vulnerability

Document Title: =============== Apple WatchOS v2.1 - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1659 Followup ID: 634926833 Release Date: ============= 2016-01-11 Vulnerability Laboratory ID VL-ID:...

copticchurch.news Open Redirect vulnerability

Vulnerable URL: http://copticchurch.news/url.html?href=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 792749 Google Pagerank| 0 VIP website...