Design/Logic Flaw

Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java...

Design/Logic Flaw

The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on the /usr/local/crashplan/log directory. This allows a user to manipulate symbolic links to escalate privileges, or show the contents of sensitive files that a regular user would...

Notes on Self-Publishing a Book

In this post I would like to share a few thoughts on self-publishing a book, in case anyone is considering that option. As I mentioned in my post on burnout, one of my goals was to publish a book on a subject other than cyber security. A friend from my Krav Maga school, Anna Wonsley, learned that...

Design/Logic Flaw

folly::secureRandom will re-use a buffer between parent and child processes when fork is called. That will result in multiple forked children producing repeat or similar results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00...

Design/Logic Flaw

A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone...

Taiwan GPS Satellite Positioning Passenger Web Design 1.0 SQL Injection

Exploit Title : Taiwan GPS Satellite Positioning Passenger Web Design 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Owner of the Script E-Mail : [email protected] Tested On : Windows Exploit Risk : Medium Version Information : 1.0 Vulnerability Type : CWE-89 Improper...

AtelyeDigital Web Design 1.0 SQL Injection

Exploit Title : AtelyeDigital Web Design 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepage : atelyedigital.com Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium Version Information : 1.0 Vulnerability Type : CWE-89 Improper Neutralizati...

BuInteractive Web Design 1.0 SQL Injection

Exploit Title : BuAdegnteractive Web Design 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepage : buinteractive.com Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium Version Information : 1.0 - Microsoft ASP.NET - IIS 6.0 + Windows Server...

NIP Kompanija Novosti A.D. Serbia Web Design 1.0 SQL Injection

Exploit Title : NIP Kompanija "Novosti" A.D. Serbia Web Design 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepage : novosti.rs Tested On : Windows Category : WebApps Exploit Risk : Medium Version Information : V1.0 - Nginx 1.7.6 - PHP 5.3.28 jQuery 1.8.3 -...

Design/Logic Flaw

imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI...

Design/Logic Flaw

UCMS 1.4.7 has XSS via the dir parameter in an index.php sadminfileedit action...

Design/Logic Flaw

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

Design/Logic Flaw

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during a line-number increment attempt...

Design/Logic Flaw

There is an illegal WRITE memory access at caca/file.c function cacafileread in libcaca 0.99.beta19...

Design/Logic Flaw

There is an illegal READ memory access at caca/dither.c function getrgbadefault in libcaca 0.99.beta19 for the default bpp case...

Guardzilla Home Cameras Open to Anyone Wanting to Watch Their Footage

Another day, another internet of things IoT issue: A design flaw in the Guardzilla home video surveillance system has been discovered that allows users to watch other homeowners’ Guardzilla videos. The Guardzilla All-In-One Video Security System is a home security platform that provides indoor...

Design/Logic Flaw

Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests...

Design/Logic Flaw

D-Link DCM-604 DCM604C1ViaCabo1.0420130606 and DCM-704 EUDCM-7041.10 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.32 and iso.3.6.1.4.1.4413.2.2.2.1.5.4.2.4.1.2.32 SNMP requests...

Design/Logic Flaw

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the commonmemberwechatmp data structure via an ac=unbindmp request to plugin.php...

Design/Logic Flaw

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string...