9398 matches found
Li Lei's blog suffers from SQL injection vulnerability (CNVD-2020-32567)
Li Lei blog is an open source PHP blog management system . Li Lei Blog has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in Li Lei's Blog
Li Lei blog is an open source PHP blog management system . Li Lei Blog has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Now's The Perfect Time to Start Using a Password Manager
Time has no meaning, and we're all stuck in front of screens. You may as well secure your life while you're always online...
Fake supreme court subpoena phishing scam steals Office 365 credentials
By Sudais Asif The new phishing scams redirect users multiple times and also uses CAPTCHA before stealing credentials. This is a post from HackRead.com Read the original post: Fake supreme court subpoena phishing scam steals Office 365 credentials...
Orchard Core RC1 Cross Site Scripting
Exploit Title: Orchard Core RC1 - Persistent Cross-Site Scripting Google Dork: "Orchardcms" Date: 2020-05-07 Exploit Author: SunCSR Sun Cyber Security Research Vendor Homepage: http://www.orchardcore.net/ Software Link: https://github.com/OrchardCMS/OrchardCore Version: RC1 Tested on: Windows CVE...
Orchard Core RC1 - Persistent Cross-Site Scripting
Exploit Title: Orchard Core RC1 - Persistent Cross-Site Scripting Google Dork: "Orchardcms" Date: 2020-05-07 Exploit Author: SunCSR Sun Cyber Security Research Vendor Homepage: http://www.orchardcore.net/ Software Link: https://github.com/OrchardCMS/OrchardCore Version: RC1 Tested on: Windows CVE...
Elementor Pro < 2.9.4 - Authenticated Arbitrary File Upload
According to Jerome Bruandet, from NintechNet, the vulnerability, currently exploited by attackers, allows any logged-in user to upload and execute PHP scripts on the blog. Chloe Chamberland from Wordfence also confirmed the issue and added that "This vulnerability is being used in conjunction wi...
New Book! The Best of TaoSecurity Blog, Volume 1
I'm very pleased to announce that I've published a new book! It's The Best of TaoSecurity Blog, Volume 1: Milestones, Philosophy and Strategy, Risk, and Advice. It's available now in the Kindle Store, and if you're a member of Kindle Unlimited, it's currently free. I may also publish a print...
SaltStack Patches Critical Vulnerabilities in Salt
SaltStack has released a security update to address critical vulnerabilities affecting Salt versions prior to 2019.2.4 and 3000.2. Salt is an open-source remote task and configuration management framework widely used in data centers and cloud servers. A remote attacker could exploit these...
CVE-2020-12472
MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...
CVE-2020-12472
MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...
Cross site scripting
MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...
CVE-2020-12472
MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...
CVE-2020-12472: Improper Neutralization of Input During Web Page Generation
MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...
PT-2020-13132
Name of the Vulnerable Software and Affected Versions MonoX versions 5.1.40.5152 and earlier Description The issue allows stored XSS via User Status, Blog Comments, or Blog Description. This can lead to malicious script execution when a user views the affected content. Recommendations For MonoX...
RM Downloader 3.1.3.2.2010.06.13 - (Load) Buffer Overflow (SEH) Exploit
Exploit Title: RM Downloader 3.1.3.2.2010.06.13 - 'Load' Buffer Overflow SEH Author: Felipe Winsnes Version: 3.1.3.2.2010.06.13 Tested on: Windows 7 x86 Proof of Concept: 1.- Run the python script, it will create a new file "poc.txt" 2.- Copy the content of the new file 'poc.txt' to clipboard 3.-...
TXQPHP Blog suffers from SQL Injection Vulnerability
TXQPHP Blog is a PHP blog system source code suitable for novice practitioners to practice, the system is written using MYSQLI, the front three templates home page, content page, message boards categories. TXQPHP Blog has a SQL injection vulnerability , an attacker can use this vulnerability to...
RM Downloader 3.1.3.2.2010.06.13 - 'Load' Buffer Overflow (SEH)
Exploit Title: RM Downloader 3.1.3.2.2010.06.13 - 'Load' Buffer Overflow SEH Date: 2020-04-20 Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/9af366e59468eac0b92212912b5c3bcb-RMDownloader.exe Version: 3.1.3.2.2010.06.13 Tested on: Windows 7 x86 Proof of Concept: 1.- Run the...
RM Downloader 3.1.3.2.2010.06.13 Buffer Overflow
Exploit Title: RM Downloader 3.1.3.2.2010.06.13 - 'Load' Buffer Overflow SEH Date: 2020-04-20 Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/9af366e59468eac0b92212912b5c3bcb-RMDownloader.exe Version: 3.1.3.2.2010.06.13 Tested on: Windows 7 x86 Proof of Concept: 1.- Run the...
