Pixel / Nexus Security Bulletin—January 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of 2018-01-05 or later address all issues in this bulletin and all issues in the...

WordPress WebConnex Form Management 1.6.3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Credit Ricardo Sanchez Vulnerable WebConnex Form Management 1.6.3 WebConnex Form Management is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this iss...

Adobe Flash - ATF Parser Heap Corruption Exploit

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1216 The attached file causes heap corruption in the ATF parser. To reproduce the issue, copy atffree.atf and LoadImage.swf to a server, and visit...

GNU binutils - aarch64_ext_ldst_reglist Buffer Overflow Exploit

Exploit for linux platform in category dos / poc Source: https://sourceware.org/bugzilla/showbug.cgi?id=21595 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the...

WordPress Theme X Arbitrary File Download Vulnerability

WordPress Theme X suffers from Arbitrary File Download Vulnerability Exploit : http://127.0.0.1/wp-admin/admin-ajax.php?action=revslidershowimage&img=LFD Google Dork : inurl:wp-content/themes/x Demo Sites :...

FlashChat File Upload Vulnerability

Exploit Title: FlashChat File Upload Vulnerability Google Dork: intitle:FlashChat v6.0.8 Date: 02.10.2013 Exploit Author: x-hayben21 Vendor Homepage: www.punish3r.com Software Link: http://www.tufat.com/script2.htm Version: v6.0.8, v6.0.2, v6.0.4, v6.0.5, v6.0.6, v6.0.7, Tested on: Windows, PHP 5...

Fedora Update for kernel FEDORA-2013-3909

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-3909 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Wordpress wp-polls plugin Full Path Disclosure vulnerability‎

Exploit for php platform in category web applications Exploit: http://localhost/wp-content/plugins/wp-polls/polls-templates.php Demo http://www.catenaccio.nl/wp-content/plugins/wp-polls/polls-templates.php http://www.iaei.org/wp-content/plugins/wp-polls/polls-templates.php...

Office 2008 sp0 RTF Pfragments MAC exploit

Exploit for macOS platform in category local exploits RTF Pfragments exploit for MAC office 2008 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Advanced Hacking Trainings - http://training.aslitsecurity.com Web - http://www.aslitsecurity.com/ Blog -...

Musiccut210p Local Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python print " Title Exploit: Musiccut210p Local Buffer Overflow" print " Auther: Angel Injection" print " Email: 1/9/2011" print " Home Page: http://www.1337day.com http://www.sec-krb.org" filename = exploit.m3u" junk = "\x41" 860...

Mozilla Firefox 5.0 DLL Hijacking Exploit(softokn3.dll)

Exploit for windows platform in category local exploits Title: Mozilla Firefox 5.0 DLL Hijacking Exploitsoftokn3.dll Software:www.mozilla-europe.org/es/ Version: 5.0 Tested on: Windows Author: PoisonCode Published: 2011-06-23 CVE-ID: | \ / | | | | | | | | / \ \ / / | | | | '| | | | | | | | | / |...

Uploaderv6.1 Remote File Upload Vulnerability

Exploit for php platform in category web applications ============================================= Uploaderv6.1 Remote File Upload Vulnerability ============================================= Uploaderv6.1 Remote File Upload Vulnerability + Author : St0rM Hacker + Email :email protected + Site : :...

NAS Uploader [V1.0 and 1.5] Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================ NAS Uploader V1.0 and 1.5 Remote File Upload Vulnerability ============================================================ | | NAS Uploader V1.0&1.5 Remote File Upload Vulnerability...

Pixelactivo 3.0 (idx) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Pixelactivo 3.0 idx Remote SQL Injection Vulnerability ======================================================== -------------------------AllaH AkbaR-------------------------------...

FreeStyle Wiki <= 3.6.2 (user.dat) Password Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== FreeStyle Wiki Affected Software: fswiki 3.6.2 = F0under: bd0rk = Greetings: TheJT, SHiKaA, Lu7k +Exploit: http://target/fswikipath/config/user.dat 0day.today 2018-01-09...