PlugX Controller Stack Buffer Overflow

This module exploits a stack buffer overflow in the PlugX Controller C2 server. Module Options msf use exploit/windows/misc/plugx msf undefinedplugx show actions ...actions... msf undefinedplugx set ACTION msf undefinedplugx show options ...show and set options... msf undefinedplugx run This modu...

lopesdonatoimoveis.com.br XSS vulnerability

Vulnerable URL: http://www.lopesdonatoimoveis.com.br/buscar.php?codigo='" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 25.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13095186 VIP website status:| No...

mrkoon.com XSS vulnerability

Vulnerable URL: http://mrkoon.com/search?q=1%22--!%3E%3CSvg/OnLoad=confirm%27OPENBUGBOUNTY%27%3E%22 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 25.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 535489 VIP...

newseasims.com XSS vulnerability

Vulnerable URL: http://www.newseasims.com/newsdetail.php?id=1%22%27--!%3E%3CScript%20/K/%3Econfirm%22OPENBUGBOUNTY%22%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:42 GMT Vulnerability type:| XSS Vulnerability status:|...

Researcher Claims Samsung's Tizen OS is Poorly Programmed; Contains 27,000 Bugs!

A researcher has claimed that Samsung's Tizen operating system that runs on millions of Samsung products is so poorly programmed that it could contain nearly 27,000 programming errors, which could also lead to thousands of vulnerabilities. Tizen is a Linux-based open-source operating system backe...

alfaromeoofscottsdale.com XSS vulnerability

Vulnerable URL: http://www.alfaromeoofscottsdale.com/blog/2017/february/15/youre-invited-2017-alfa-romeo-giulia-launch-party-feb-24.htm/"--!"/ Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:39 GMT Vulnerability type:| XSS Vulnerability...

h1z1db.net XSS vulnerability

Vulnerable URL: http://www.h1z1db.net/register.php Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 203887 VIP website status:| No Check h1z1db.net SSL...

werkenineenhotel.nl XSS vulnerability

Vulnerable URL: https://www.werkenineenhotel.nl/hotelvacaturesbanenbijbanenstage/?companygroupid=ratingid==availabilityid==a%27aa%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E==Zoeken Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:...

emerx.cz XSS vulnerability

Vulnerable URL: https://www.emerx.cz/hledani?s=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=HLEDAT=92=searchForm-submit Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

facebook.com Open Redirect vulnerability

Vulnerable URL:...

gute-rate.de XSS vulnerability

Vulnerable URL: http://www.gute-rate.de/Fahrzeuge/Suche/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 374430 VIP website status:| No Check gute-rate.de SSL connection:| Grade: C+ Coordinated Disclosure Timelin...

durell.co.uk XSS vulnerability

Vulnerable URL: http://durell.co.uk/programservices/onlinesystemmanual/files/page-viewer.asp?pagetitle=Spreadsheet,%20Example%20to%20List%20Fees%20Financial%20Adviser=1288%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22=files/Spreadsheet,%20Example%20to%20List%20Fees%20Financial%20Adviser.htm...

edu.27.ru XSS vulnerability

Vulnerable URL: http://edu.27.ru/cgi-bin/BigChineseFireWall.pl?siteurl=PHN2ZyBvbmxvYWQ9InByb21wdCgnb3BlbmJ1Z2JvdW50eScpIjs+=999=localhost Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:18 GMT Vulnerability type:| XSS Vulnerability status:|...

Quest Privilege Manager pmmasterd Buffer Overflow Exploit

This Metasploit modules exploits a buffer overflow in the Quest Privilege Manager, a software used to integrate Active Directory with Linux and Unix systems. The vulnerability exists in the pmmasterd daemon, and can only triggered when the host has been configured as a policy server Privilege...

Quest Privilege Manager Elevation of Privilege Vulnerability

Quest Privilege Manager is a comprehensive solution for user privilege management that provides the core functionality needed to quickly elevate and manage user and administrative privileges. pmmasterd is one of the encryption programs. A security vulnerability exists in pmmasterd in Quest...

rentolease.co.uk XSS vulnerability

Vulnerable URL: http://www.rentolease.co.uk/BlogView.asp?SearchPhrase=BUY+TO+LET+ARLA+2014+Ayrshire+property+market%22%27--!%3E%3CScript%20/K/%3Econfirm%22OPENBUGBOUNTY%22%3C/Script%20/K/%3E==123074==6 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

inzeromat.cz XSS vulnerability

Vulnerable URL: https://www.inzeromat.cz/?utmsource=knoxss.me"'--! Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 938363 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

The Backstory Behind Carder Kingpin Roman Seleznev’s Record 27 Year Prison Sentence

Roman Seleznev, a 32-year-old Russian cybercriminal and prolific credit card thief, was sentenced Friday to 27 years in federal prison. That is a record punishment for hacking violations in the United States and by all accounts one designed to send a message to criminal hackers everywhere. But a...

bygghemma.se XSS vulnerability

Vulnerable URL: https://www.bygghemma.se/sok?phrase=b%27-alertOPENBUGBOUNTY-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 94205 VIP website status:| No Check bygghemma.se SSL...

Quest Privilege Manager pmmasterd Buffer Overflow

This modules exploits a buffer overflow in the Quest Privilege Manager, a software used to integrate Active Directory with Linux and Unix systems. The vulnerability exists in the pmmasterd daemon, and can only triggered when the host has been configured as a policy server Privilege Manager for Un...