4199 matches found
OpenGB 1.2.3 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications OpenGB version 1.2.3 Cross Site Scripting XSS Vulnerability ================================================================= Discovered by NA, NAattutanota.com ====================================== Description ============ A simple PHP MySQL...
PCMan FTP Server 2.0.7 - 'PORT' Command Buffer Overflow Exploit
Exploit for windows platform in category remote exploits !/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0 PORT Command BoF Exploit Author: Pablo González Date: 4/11/2016 Software: PCMan 2.0 Tested on: Windows XP Profesional SP3 Spanish x86 import socket print "Creating...
Hijacking NodeMCU Development Board-vulnerability warning-the black bar safety net
Long before the want to play the Board, The do nothing poor and can't afford it. Just the school issued a NodeMCU, although it is a cheap Board, play play is also good. This Board also let me play for several days, a start is to build a good car, in teacher to a Scratch on the play for a moment,...
Nymaim Dropper Updates Delivery, Obfuscation Methods
A new variant of the Nymaim dropper has been identified that includes updated delivery and obfuscation methods, and the use of PowerShell routines to download its payloads. The updated dropper, used primarily to download banking Trojans in the past, has also been spreading ransomware, according t...
Informatica: [afocusp.informatica.com] Sql injection afocusp.informatica.com:37777
hi !There is another sql injection on host afocusp.informatica.com:37777 POC version http://afocusp.informatica.com:37777/pls/apex/f?;OWAUTIL.CELLSPRINT:1;--=select++from+v$version hostname of the database server psvlxtdapp1.inf...
InfraPower PPS-02-S Q213V1 - Insecure Direct Object Reference
InfraPower PPS-02-S Q213V1 Insecure Direct Object Reference Authorization Bypass Vendor: Austin Hughes Electronics Ltd. Product web page: http://www.austin-hughes.com Affected version: Q213V1 Firmware: V2395S Fixed version: Q216V3 Firmware: IPD-02-FW-v03 Summary: InfraPower Manager PPS-02-S is a...
SOL31510510 - OpenSSH vulnerability CVE-2016-6515
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
Symantec-PcAnywhere-12.5.0
Exploit Title: Symantec PcAnywhere login and password field buffer overflow Date: 2012.06.27 Software Link: symantec.com Version: 12.5.0 Tested on: Windows XP SP2 import socket import time import struct import string import sys shell = "\xda\xda\xbb\x9e\x7f\xfb\x04\xd9\x74\x24\xf4\x58\x2b\xc9"...
Apache Httpd < 2.4.25 : IP address spoofing when proxying using mod_remoteip and mod_rewrite
For configurations using proxying with modremoteip and certain modrewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020...
SAP Netweaver 2004s SAP_BASIS and SAP_ABA Component Message Forgery Vulnerability
SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. An information forgery vulnerability exists in the SAPBASIS and SAPABA components in SAP Netweaver 2004s, version 7.00 SP Level 0031, which can be exploited by a remote attacker to forge an IP...
CVE-2016-4551
The 1 SAPBASIS and 2 SAPABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit Log via vectors related to the network landscape, aka SAP Security Note 2190621...
Apple Tracks Who You're Chatting Using iMessage — and Shares that Data with Police
Doing conversations with your friend on iMessage and thinking that they are safe and out of reach from anyone else other than you and your friend? No, it's not. End-to-end encryption doesn't mean that your iMessages are secure enough to hide your trace because Apple not only stores a lot of...
IRCCloud: Exposed, outdated nginx server (v1.4.6) potentially vulnerable to heap-based buffer overflow & RCE
Summary ======== During my reconnaissance for your bug bounty program, I discovered an instance of nginx version 1.4.6 running at the IP address https://54.153.101.52. To locate it, I search for IRCCloud-related certificated and found the self-signed certificate for this server...
VK.com: Второй способ обхода 2FA
Недостаточная проверка пользователя при смене IP-адреса. Лазейка с релогином при смене IP у пользователя...
RCE In AddThis
This vulnerability has been fixed as of July 20, 2016 and is shared with consent from the vendor. If you wish to share the information provided in the write up, provide credit for the original author or contact [email protected] for more info. Timeline of the report 1. July 20, 2016 8:59 AM:...
D-Link router firmware the back door that leads within the network domain name hijacking-vulnerability warning-the black bar safety net
This Backdoor can lead to a domain being hijacked, hijacking of domain names is available in the remote server control, with the back door of the firmware: DI7001-15.07. 15A1. trx DI7001W-15.07. 15A1. trx DI7002-15.07. 15A1. trx DI7002W-15.07. 15A1. trx DI7008W-14.10. 11A1. trx DI7100-15.07. 15A1...
CVE-2016-5673
CVE-2016-5673 affects UltraVNC Repeater prior to 1300, which does not restrict destination IP addresses or TCP ports. This allows a remote attacker to induce the repeater (acting as a proxy) to open connections to arbitrary hosts/ports, e.g., exploiting a :: substring between IP and port. The vul...
Firefox, Chrome are caught: for the mainstream the browser's address fraud vulnerabilities-vulnerability warning-the black bar safety net
! Researcher Rafay Baloch yesterday disclosed the vulnerability details, he was in year 3, on Singapore's Black Hat Asia to do about the address bar spoofing of speech. The vulnerability principle Baloch in the personal web site said that the vulnerability of the main reason is that Chrome and...
LocalTapiola: Blind Stored XSS Against Lahitapiola Employees - Session and Information leakage
Hi, I am pretty sure that I found a vulnerability similar to https://hackerone.com/reports/135154. An adversary can use the "Lähetä viesti"-functionality of the LähiTapiola Asiakassalkku to send a malicious file. When the customer service opens the file, an XSS will execute and will leak user IP...
