Samsung Smart Home Camera SNH-P-6410 - Command Injection

E-DB Note: source https://www.pentestpartners.com/blog/samsungs-smart-camera-a-tale-of-iot-network-security/ import urllib, urllib2, crypt, time New password for web interface webpassword = 'admin' New password for root rootpassword = 'root' IP of the camera ip = '192.168.12.61' These are all for...

dwcms \app\Home\Controller\IndexController.class.php parameters cname SQL injection

No description provided by source...

gxlcms sound novel system \Lib\Lib\Action\Home\HitsAction.class.php variable sid SQL injection

No description provided by source...

OLX: XSS on Home page olx.com.ar via auto save search text

Hi guys, I found XSS vulnerability on Home page olx.com.ar via auto save search text 1. Copy full link and go to the URL in browser: https://www.olx.com.ar/nf/search/xss%22-'%20%22%3E%3Ciframe/src%20////onload%20=%20alertdocument.cookie%20onerror=alertdocument.cookie 2. Click logo button go back ...

Citrix Worx Home and Citrix XenMobile MDX Toolkit Security Bypass Vulnerability

Citrix Worx Home and Citrix XenMobile MDX Toolkit are both products of Citrix Systems USA. The former is a suite of software used to help users access data or work-related applications, and the latter is a toolkit that can encapsulate mobile applications on iOS or Android with Citrix logic and...

CVE-2016-5109

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication...

CVE-2016-5109

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication...

Authentication flaw

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication...

CVE-2016-5109

Summary of the vulnerability (CVE-2016-5109) : Citrix Worx Home for iOS and XenMobile MDX Toolkit for iOS are affected. Versions affected: XenMobile MDX Toolkit for iOS 10.3.0.x–10.3.5.x and Worx Home 10.3.x for iOS 10.3.0.x–10.3.5.x. Root cause / impact : An attacker with physical access could b...

D-Links Wi-Fi Camera in the presence of a vulnerability will affect more than 1 2 0 different products-vulnerability warning-the black bar safety net

! According to foreign media reports, security experts discovered a software plug-in, this component will be D-Links Wi-Fi camera is exposed to a remote attack risk. In addition, making the current situation worse, in the company's products, there are about 1 2 0 more products are using this...

The vulnerability of the Cisco Nexus 5000 software allows a malicious actor to trigger buffer overflows.

The buffer overflow in the implementation of the Smart Call Home function in Cisco NX-OS for Cisco Unified Computing System UCS switches and Nexus devices, as well as in Cisco CG-OS for Cisco Connected Grid series 1000 routers, allows remote SMTP servers to execute arbitrary code using specially...

Linux Home Folder Accessible (HTTP)

The script attempts to identify files of a linux home folder accessible at the webserver. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...

The vulnerability of the Firefox browser, which allows a malicious actor to perform a denial-of-service attack

The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of access restrictions for scripts from other pages to the about:home button. Exploiting this vulnerability allows malicious actors, operating remotely, to induce a service failure resumption of the sessi...

LizardStresser IoT Botnets Part of 400Gbps DDoS Attacks

LizardStresser, a distributed denial of service botnet, has found new life leveraging hundreds of internet-based webcams in attacks against Brazilian-based banks, government agencies as well as a handful of U.S.-based gaming companies. Researchers at the Arbor’s Security Engineering and Response...

Flow Home (Beta) - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Flow Home Beta published at the 'play' market has multiple vulnerabilities...

CVE-2016-5109 - Authentication bypass vulnerability in Citrix Worx Home for iOS and Citrix MDX Toolkit for iOS

Description of Problem A vulnerability has been identified that affects iOS applications using the XenMobile MDX Toolkit. An attacker with physical access to the device could bypass in-application Apple Touch ID authentication in some cases where re-authentication is required. This vulnerability...

WSTMall apps\home\model\goodsAppraisesModel.class.php id parameter SQL injection

No description provided by source...

里程密博客系统 Application/Home/Controller/BlogController.class.php等两处SQL注入

No description provided by source...

CIScan 1.00 - HostnameIP Field Overwrite (SEH) (PoC)

CIScan 1.00 - HostnameIP Field Overwrite SEH PoC !/usr/bin/python Exploit Title : CIScanv1.00 Hostname/IP Field SEH Overwrite POC Discovery by : Nipun Jaswal Email : [email protected] Discovery Date : 11/05/2016 Software Link : http://www.mcafee.com/us/downloads/free-tools/ciscan.aspx Tested...

CIScan 1.00 - Hostname/IP Field Overwrite (SEH) (PoC)

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title : CIScanv1.00 Hostname/IP Field SEH Overwrite POC Discovery by : Nipun Jaswal Email : email protected Discovery Date : 11/05/2016 Software Link : http://www.mcafee.com/us/downloads/free-tools/ciscan.aspx Tested...