7037 matches found
Darksplitz - Exploit Framework
This tools is continued from Nefix, DirsPy and Xmasspy project. Installation Will work fine in the debian shade operating system, like Backbox, Ubuntu or Kali linux. 1. $ git clone https://github.com/koboi137/darksplitz 2. $ cd darksplitz/ 3. $ sudo ./install.sh Features Extract mikrotik credenti...
Lenovo Bootable Generator Vulnerability - US
Lenovo Security Advisory: LEN-25401 Potential Impact: Code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6154 Summary Description: A DLL search path vulnerability was reported in Lenovo Bootable Generator that could allow a malicious user with local access t...
Lenovo Bootable Generator Vulnerability - Lenovo Support US
No description provided...
Cisco RV320 Command Injection
Advisory: Cisco RV320 Command Injection RedTeam Pentesting discovered a command injection vulnerability in the web-based certificate generator feature of the Cisco RV320 router which was inadequately patched by the vendor. Details ======= Product: Cisco RV320 Dual Gigabit WAN VPN Router, possibly...
CVE-2018-20121
Podcast Generator 2.7 has stored cross-site scripting XSS via the URL addcategory parameter...
Cross site scripting
Podcast Generator 2.7 has stored cross-site scripting XSS via the URL addcategory parameter...
CVE-2018-20121
CVE-2018-20121 – Podcast Generator 2.7 suffers a stored cross-site scripting (XSS) flaw exploitable via the addcategory parameter in the /?p=admin&do=categories&action=add endpoint. The vulnerability arises from unsafely handling user-supplied input, enabling injection of arbitrary web script/HTM...
CVE-2018-20121
Podcast Generator 2.7 has stored cross-site scripting XSS via the URL addcategory parameter...
[SECURITY] Fedora 29 Update: jackson-databind-2.9.8-1.fc29
The general-purpose data-binding functionality and tree-model for Jackson D ata Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration...
BoNeSi - The DDoS Botnet Simulator
BoNeSi , the DDoS Botnet Simulator is a Tool to simulate Botnet Traffic in a testbed environment on the wire. It is designed to study the effect of DDoS attacks. What traffic can be generated? BoNeSi generates ICMP, UDP and TCP HTTP flooding attacks from a defined botnet size different IP...
Joomla OSMap 4.2.19 Database Disclosure / SQL Injection
Exploit Title : Joomla OSMap Components 4.2.19 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : joomlashack.com Software Download Link : joomlashack.com/joomla-extensions/osmap/...
What you can learn from Cisco Talos’ new oil pumpjack workshop
Paul Rascagneres wrote this blog post with contributions from Patrick DeSantis from Cisco Talos ARES Advanced Research/Embedded Systems. Executive summary Every day, more industrial control systems ICS become vulnerable to cyber attacks. As these massive, critical machines become more...
Netsniff-Ng - A Swiss Army Knife For Your Daily Linux Network Plumbing
netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space a...
Podcast Generator Cross-Site Scripting Vulnerability
Podcast Generator is a set of free podcast publishing scripts written in PHP. A cross-site scripting vulnerability exists in Podcast Generator version 2.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2019:0197-1)
This update for openssl-11 fixes the following issues : Security issues fixed : The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations bsc1117951 Fix FIPS RSA generator bsc1118913 Note that Tenable Network Security has extracted the preceding description block directly from the...
SUSE-SU-2019:0197-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: Security issues fixed: - The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations bsc1117951 - Fix FIPS RSA generator bsc1118913...
The vulnerability of the RsaKeyPairGenerator::getNumberOfIterations() method in the Bouncy Castle library allows a hacker to gain unauthorized access to protected data.
The vulnerability of the RsaKeyPairGenerator::getNumberOfIterations method in the Bouncy Castle library is related to deficiencies in the use of cryptographic keys. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data using network protocols such as...
Podcast Generator 2.7 Cross Site Scripting
Stored Cross-site Scripting Vulnerability in Podcast Generator 2.7 Information -------------------- Advisory by Netsparker Name: Stored Cross-site scripting in Podcast Generator 2.7 Affected Software: Podcast Generator Affected Versions: 2.7 Homepage: http://www.podcastgenerator.net/ Vulnerabilit...
Insecure Random Number Generator
gcc is vulnerable to insecure random number generator attacks. The vulnerability exists under certain circumstances, the ix86expandbuiltin function in i386.c in GNU Compiler Collection GCC version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber...
