136 matches found
Razer US: Reflected XSS on domain support.razerzone.com
The researcher hisxo discovered a reflected XSS vulnerability on support.razerzone.com. hisxo also worked with H1 Triage to provide a valid PoC that demonstrated payload delivery using Burp Suite. We appreciate the extra work and look forward to working with the researcher in the future...
Razer US: Reflected XSS on the https://deals.razerzone.com/json/translation endpoint
Thanks to SP1D3RS for the great report and working with the team on this one. This was a trivial POST-XSS, caused by using text/html Content-Type on the JSON endpoint, and ability to control the part of the response using unsanitized input. Why I disclosed it if this is a trivial issue? I pretty...
GSA Bounty: federalist.18f.gov vulnerable to Sweet32 attack
The researcher noted that federalist.18f.gov allows use of the TLSRSAWITH3DESEDECBCSHA cipher, which is now marked as "weak" in SSL labs because of risks of MitM attacks given this vulnerability: https://sweet32.info/, which requires monitoring of a long lived HTTPS connection. We inherit this...
Brave Software: Address Bar Spoofing - Already resolved - Retroactive report
Summary: All details were provided in the original report. You can read it here I'm reporting it here because I asked bcrypt if I should do it and he told me this: F127893 As she said me, I'm reporting here and indicating it's for a retroactive reward. If any identity confirmation or link between...
Legal Robot: Server version disclosure
Security researcher discovered a NGINX version disclosure on legalrobot.com by submitting illegal characters. As a result of this report, we clarified our H1 policy on version disclosure without demonstrated vulnerability...
D-Link DIR615h OS Command Injection
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'D-Link DIR615h OS Command Injection',...
D-Link DIR-615 Rev H - Multiple Vulnerabilities
Device Name: DIR-615 - Hardware revision H1 Vendor: D-Link ============ Device Description: ============ Delivering great wireless performance, network security and coverage, the D-Link Wireless N 300 Router DIR-615 is ideal for upgrading your existing wireless home network. Source:...
Debian DSA-853-1 : ethereal - several vulnerabilities
Several security problems have been discovered in ethereal, a commonly used network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2360 Memory allocation errors in the LDAP dissector can cause a denial of service. - CAN-2005-2361...
CVE-2005-2363
Unknown vulnerability in the 1 SMPP dissector, 2 802.3 dissector, 3 DHCP, 4 MEGACO dissector, or 5 H1 dissector in Ethereal 0.8.15 through 0.10.11 allows remote attackers to cause a denial of service infinite loop via unknown attack vectors...
FreeBSD : ethereal -- multiple protocol dissectors vulnerabilities (5d51d245-00ca-11da-bc08-0001020eed82)
An Ethreal Security Advisories reports : Our testing program has turned up several more security issues : - The LDAP dissector could free static memory and crash. - The AgentX dissector could crash. - The 802.3 dissector could go into an infinite loop. - The PER dissector could abort. - The DHCP...
2022-07 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H1 (KB5015730)
2022-07 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H1 KB5015730...
2021-08 Cumulative Update Preview for Windows 10 Version 21H1 for x64-based Systems (KB5005101)
2021-08 Cumulative Update Preview for Windows 10 Version 21H1 for x64-based Systems KB5005101...
2021-08 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H1 for x64 (KB5004331)
2021-08 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H1 for x64 KB5004331...
2021-07 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H1 for x64 (KB5003537)
2021-07 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H1 for x64 KB5003537...