Google Chrome V8 - Genesis::InitializeGlobal Out-of-Bounds Read/Write Exploit

Exploit for multiple platform in category dos / poc / Bug: The Genesis::InitializeGlobal method initializes the constructor of RegExp as follows: // Builtin functions for RegExp.prototype. Handle regexpfun = InstallFunction global, "RegExp", JSREGEXPTYPE, JSRegExp::kSize +...

genesisbikes.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-582078 Description| Value ---|--- Affected Website:| genesisbikes.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

genesis-klatka.tk XSS vulnerability

Vulnerable URL: http://genesis-klatka.tk/teksty/tekst.php?idtxt=tboef=sebtp%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 218071...

genesis.iitm.ac.in XSS vulnerability

Vulnerable URL: https://genesis.iitm.ac.in/index.php?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Iconics Genesis SCADA Integer Overflow 0x04b0

An integer overflow vulnerability has been reported in Iconics Genesis GenBroker...

Urban Genesis SQL Injection

. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...

Vulnerabilities in some SCADA server softwares

The following are almost all the vulnerabilities I found for a quick experiment some months ago in certain well known server-side SCADA softwares still vulnerable in this moment. In case someone doesn't know SCADA like me before the tests: it's just one or more softwares usually a core, a graphic...

Hackers get access to N.J. school data system !

4chan users online bulletin board has been able to access the online information system used by student school district in New Jersey after the administrator password of the school was registered last week 4chan. The trouble began last Tuesday, according to Plainfield Board of Education, which...

New Jersey Student Record Database Hacked

A New Jersey school district was vandalized by members of the online mischief making group 4chan after an administrative password to a student record management system used at 160 school systems across New Jersey. The hack occurred after the administrative account used by the Plainfield, New...

VideoLAN VLC Media Player 0.8.6 a/b/c/d (Win32 Universal) - '.ass' Local Buffer Overflow

/%VLC vs 0.6.8 bcda .ASS file buffer overflow exploitwin32 universal %Works every time,works on any win32 OS,tested on Windows xp sp2. %My doctor said that I have seriuouse problems ,but I think he's full of it because the voices tell me I'm ok!/ include include include define File...

Solaris 8 (i386) : 118619-01

The remote host is missing Sun Security Patch number 118619-01 NSS for Java JSS 3.1.2.3 SunOS 5.8x86 5.9x86: genesis patch. Date this patch was last updated by Sun : Wed Feb 16 01:48:15 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...