HP VAN SDN Controller Root Command Injection Exploit

This Metasploit module exploits a hardcoded service token or default credentials in HPE VAN SDN Controller versions 2.7.18.0503 and below to execute a payload as root. A root command injection was discovered in the uninstall action's name parameter, obviating the need to use sudo for privilege...

rentingauthority.com XSS vulnerability

Open Bug Bounty ID: OBB-636222 Description| Value ---|--- Affected Website:| rentingauthority.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Linksys WVBR0-25 Command Injection (CVE-2017-17411)

A command injection vulnerability exists in Linksys WVBR0-25. The vulnerability is due to insufficient input validation in the router's web management portal. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

Threat Outbreak Alert RuleID32832: Email Messages Distributing Malicious Software on May 25, 2018

Medium Alert ID: 57964 First Published: 2018 May 25 18:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32832 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32843: Email Messages Distributing Malicious Software on May 25, 2018

Medium Alert ID: 57969 First Published: 2018 May 25 18:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32843 may contain the following files: Name | Size...

heimsbrunn.com XSS vulnerability

Open Bug Bounty ID: OBB-622265 Description| Value ---|--- Affected Website:| heimsbrunn.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

gonzague.tv XSS vulnerability

Open Bug Bounty ID: OBB-621899 Description| Value ---|--- Affected Website:| gonzague.tv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-5159

creationtimestamp| type| source ---|---|--- 2018-05-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44759...

CVE-2018-2791

creationtimestamp| type| source ---|---|--- 2018-05-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44752...

FiberHome User End Routers Bearing Access Authentication Bypass Vulnerability

FiberHome User End Routers Bearing AN1020-25 is a router from FiberHome, China. A security vulnerability exists in the FiberHome User End Routers Bearing AN1020-25, which is caused by a program that fails to properly perform authentication. An attacker could exploit the vulnerability to restore t...

BlueHat v18 Announced & Call for Papers Opens

We are back! Microsoft is excited to announce the next installment of the BlueHat Security Conference – BlueHat v18. We will be holding the event at Microsoft’s headquarter campus September 25-27, 2018. This year we are adding the option for workshops and networking on the first day prior to the...

BlueHat v18 Announced & Call for Papers Opens

We are back! Microsoft is excited to announce the next installment of the BlueHat Security Conference – BlueHat v18. We will be holding the event at Microsoft’s headquarter campus September 25-27, 2018. This year we are adding the option for workshops and networking on the first day prior to the...

A cryptocurrency platform exposed sensitive data of 25,000 users

By Waqas Bezop, a cryptocurrency startup exposed highly personal details of more This is a post from HackRead.com Read the original post: A cryptocurrency platform exposed sensitive data of 25,000 users...

akgunzuccaciye.com XSS vulnerability

Open Bug Bounty ID: OBB-608441 Description| Value ---|--- Affected Website:| akgunzuccaciye.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-10308

creationtimestamp| type| source ---|---|--- 2018-04-25 17:10:54+00:00| seen| Telegram/lmmZr6YlzTiBIMJEui8JfbMYWDijQYebl2SasFLljTT1LA...

dmweb.groupegoyette.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-608060 Description| Value ---|--- Affected Website:| dmweb.groupegoyette.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Exodus Wallet (ElectronJS Framework) - Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' class MetasploitModule 'Exodus Wallet ElectronJS Framework remote Code Execution', 'Description' = %q This module exploits a Remote...

bullzip.com XSS vulnerability

Open Bug Bounty ID: OBB-591979 Description| Value ---|--- Affected Website:| bullzip.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tonetolabs.com XSS vulnerability

Open Bug Bounty ID: OBB-590636 Description| Value ---|--- Affected Website:| tonetolabs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kopyrightkorea.com XSS vulnerability

Open Bug Bounty ID: OBB-588956 Description| Value ---|--- Affected Website:| kopyrightkorea.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...