WordPress QAEngine Theme 1.4 Privilege Escalation

Theme Link: https://www.enginethemes.com/themes/qaengine/ - Vulnerability Description: + 1st Vulnerability: qaengine vulnerability allows an attacker to have an administrator account on the target's website vuln code in /qaengine/includes/aecore/class-ae-users.php: public function insert...

Debian Security Advisory DSA 3235-1 (openjdk-7 - security update)

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service. OpenVAS Vulnerability Test $Id: deb3235.nasl 6609 2017-07-07 12:05:59Z...

Magento remote code execution vulnerability analysis report-vulnerability warning-the black bar safety net

Check Point company researchers recently in Magento e-Commerce network platform on which to found a dangerous remote code execution RCE）vulnerabilities, the vulnerabilities could cause the Magento platform on the e-shops of all hackers, including credit card information and some other property an...

Palo Alto Device / PAN-OS Detection (HTTP XML-API)

HTTP XML-API based detection of the Palo Alto devices and the underlying PAN-OS operating system. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

MediaSuite CMS - Artibary File Disclosure

MediaSuite CMS - Artibary File Disclosure . | | / | | \ \ | | \ / | |\ / / /\ \ / \ | / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://twitter.com/h4SEC / \ | \ \ Proof Video: https://www.youtube.com/watch?v=7yxbfD1YK8Y / // / \ / My + Author : KnocKout E-Mail : [email protected]...

Unzip Extra Field Uncompressed Size Buffer Overflow (CVE-2014-9636)

A buffer overflow vulnerability exists in Info-ZIP UnZip tool. The vulnerability is due to insufficient bounds checking on user-supplied input while handling ZIP files. A remote unauthenticated attacker can exploit these vulnerabilities by enticing a target user to open a crafted ZIP archive with...

MediaSuite CMS - Artibary File Disclosure Exploit

Exploit for php platform in category web applications . | | / | | \ \ | | \ / | |\ / / /\ \ / \ | / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://twitter.com/h4SEC / \ | \ \ Proof Video: https://www.youtube.com/watch?v=7yxbfD1YK8Y / // / \ / My + Author : KnocKout E-Mail : email protected...

php: multiple issues

CVE-2015-1351 denial of service Use-after-free vulnerability in the zendsharedmemdup function in zendsharedalloc.c in the OPcache extension allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. - CVE-2015-1352 denial of service The...

Design/Logic Flaw

The USAA Mobile Banking application before 7.10.1 for Android displays the most recently-used screen before prompting the user for login, which might allow physically proximate users to obtain banking account numbers and balances...

CVE-2015-3320

Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to obtain keypress information by accessing debug output...

Android IMSI-Catcher Detector: AIMSICD

AIMSICD is an app to detect IMSI-Catchers . IMSI-Catchers are false mobile towers base stations acting between the target mobile phones and the real towers of service providers. As such they are considered a Man-In-The-Middle MITM attack. In the USA the IMSI-Catcher technology is known under the...

WordPress Plugin Ajax Store Locator 1.2 - SQL Injection

WordPress Plugin Ajax Store Locator 1.2 - SQL Injection Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQ...

impacket

Impacket ======== !Latest Versionhttps://img.shields.io/pyp...

Microsoft Releases April 2015 Security Bulletin

Microsoft has released eleven updates to address vulnerabilities in Microsoft Windows. Some of these vulnerabilities could allow elevation of privilege, denial of service, remote code execution, information disclosure, or security feature bypass. US-CERT encourages users and administrators to...

SQL Injection Vulnerability in Safi OA System

Safe OA system is an office system developed by ASP.NET, and customers involved in medicine, finance, schools, administration and many other units. There is a SQL injection vulnerability in Safi OA system, because the ID parameter of the /ArchiveSend/GetArchiveFlowInfo.aspx page fails to filter t...

Samba < 3.6.2 (x86) - Denial of Service (PoC)

!/usr/bin/python """ Exploit for Samba vulnerabilty CVE-2015-0240 by sleepya The exploit only targets vulnerable x86 smbd 3.6.24 which 'creds' is controlled by ReferentID field of PrimaryName ServerName. That means 'talloczero' in libtalloc does not write a value on 'creds' address. Reference: -...

WordPress QAEngine Theme Privilege Escalation Vulnerability

qaengine vulnerability allows an attacker to have an administrator account on the target's website ------------------------------------------------------------------------------ WordPress QAEngine Theme Privilege Escalation...

Imagefield Info - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-088

Imagefield Info module enables you to view image field paths so you can easily use them with a WYSIWYG editor. The module doesn't sufficiently sanitize user supplied text in some administration pages, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fa...

SSL Labs API Client

This module is a simple client for the SSL Labs APIs, designed for SSL/TLS assessment during a penetration test. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'activesupport/inflector' require 'json' require...

ShopEx旗下产品ECSTORE 用户地址&amp;联系方式泄露漏洞

简要描述： ShopEx旗下产品ECSTORE用户信息泄露 详细说明： 一开始是测试贝备网的，相关漏洞： WooYun: 贝备网某站越权影响用户敏感信息 然后发现这套系统不像贝备网自己写的，有点眼熟。于是找了关键词谷歌了一把 接着就发现：21cake也有一样问题， 相关漏洞：http://www.wooyun.org/bugs/wooyun-2010-0103731/trace/871e09c984979a433fdb3724361d4ba9 于是，就发现这绝对是一套通用系统…… 终于，发现了 水落石出，这是ECSTORE 于是就搜索：Ecstore demo 漏洞证明： img...