CVE-2017-17809

The CVE-2017-17809 entry affects Golden Frog VyprVPN for macOS prior to 2.15.0.5828. The vyprvpnservice launch daemon exposes an unprotected XPC service that lets attackers update the underlying OpenVPN configuration and the arguments passed to the OpenVPN binary. An attacker could abuse this to ...

Abusing Windows Security: mimikatz

mimikatz is well known tool for extraction of plaintexts passwords, hashes, PIN codes and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. A lot of times after the initial exploitation phase attackers may want to get a firmer foothold...

Dongguan Golden Drum Network Technology Co., Ltd. website construction system has SQL injection vulnerabilities

Dongguan Golden Drum Network Technology Co., Ltd. is a network company, specializing in the field of website design and Internet marketing. Dongguan Golden Drum Network Technology Co., Ltd. website construction system has a SQL injection vulnerability, attackers can use the vulnerability to obtai...

SAML Post-Intrusion Attack Mirrors ‘Golden Ticket’

Researchers at CyberArk Labs have created a post-intrusion attack technique known as a Golden SAML that could allow an attacker to fake enterprise user identities and forge authentication to gain access to valuable cloud resources in a federation environment. “Using this post-exploit technique,...

goldenrose.co.il XSS vulnerability

Open Bug Bounty ID: OBB-367653 Description| Value ---|--- Affected Website:| goldenrose.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

goldenlighting.com XSS vulnerability

Vulnerable URL: http://www.goldenlighting.com/app/site/query/getcustomermessage.nl/c.1029593/n.1/.f?=Welcome+to+IS+Custom+Uniforms%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerabilit...

SQL injection vulnerability in id parameter of website building system of Suzhou Golden Shield Network Technology Co.

Ltd. is mainly engaged in website construction, website promotion, website optimization, enterprise post office, color page samples and other services for Suzhou enterprises. Suzhou Golden Shield Network Technology Co., Ltd. building system id parameters exist SQL injection vulnerability, attacke...

Facebook Covertly Launches A Photo-Sharing App In China

The Chinese market is no doubt a pot of gold for big technology giants with over 700 million internet users, but the Chinese government heavily controls the Internet within its borders through its Golden Shield project – the Great Firewall of China. The Great Firewall has blocked some 171 out of...

golden-tours.co.il XSS vulnerability

Vulnerable URL: http://www.golden-tours.co.il/pack.php?recordID=140%27%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 21:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

Oracle golden gate critical vulnerability analysis-vulnerability warning-the black bar safety net

In this article, we will once again prove over-reliance on automation tool will allow people to ignore off a lot of potential danger, at the same time, we will also discuss some of the relevant Oracle Golden Gate technical level of the important weaknesses vulnerability, and to show you yet anoth...

Joomla JEmbedAll 1.4 SQL Injection

Exploit Title: Joomla! Component JEmbedAll v1.4 - SQL Injection Google Dork: inurl:index.php?option=comjembedall Date: 16.02.2017 Vendor Homepage: http://www.goldengravel.eu/ Software Buy: https://extensions.joomla.org/extensions/extension/core-enhancements/coding-a-scripts-integration/jembedall/...

Golden Magpie Door Enterprise Management Software Has Multiple SQL Injection Vulnerabilities

Golden Magpie Door Enterprise Management Software is a comprehensive management system for the production and sales of wooden door manufacturers and the purchase of customers. There are multiple SQL injection vulnerabilities in Golden Magpie Door Enterprise Management Software, which can be...

partners.goldennuggetaffiliates.com XSS vulnerability

Vulnerable URL: https://partners.goldennuggetaffiliates.com/processing/profilerotator.asp?pid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 31.10.2016 Latest check for patch:| 31.10.2016 15:51 GMT Vulnerability type:| XSS...

金窗教务系统 /install/mzzup.asp 目录遍历

No description provided by source...

Golden Ninja Temple Run - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Golden Ninja Temple Run published at the 'play' market has multiple vulnerabilities...

Slots Golden Dragon Free Slots - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Slots Golden Dragon Free Slots published at the 'play' market has multiple vulnerabilities...

Golden Ark slot - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Golden Ark slot published at the 'play' market has multiple vulnerabilities...

Golden Lion Slots™-Free Casino - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Golden Lion Slots™-Free Casino published at the 'play' market has multiple vulnerabilities...

Farkle - Golden Dice - Dangerous filesystem permissions, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Farkle - Golden Dice published at the 'play' market has multiple vulnerabilities...

CVE-2016-0452

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0451...