Enter: IDOR on remoing Share

Issue In case of Operator Wallets, only Owner has the permission to delete share with any user. But It is possible for any user to delete share for any other user. POC 1. Suppose a wallet BITCOINS is created by user A and shared with user B and C. 2. User B can send the following request and dele...

X (Formerly Twitter): Highly wormable clickjacking in player card

Hi, I would like to report an issue where player card is vulnerable to clickjacking in certain browsers. This may result in something similar to XSS worm and many other critical damages. Details Twitter Player Card allows a website to embed a custom playerhtml into an iframe in a tweet. There are...

WordPress sourceAFRICA 0.1.3 Cross Site Scripting

Exploit Title : Wordpress sourceAFRICA Plugin Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : https://wordpress.org/plugins/sourceafrica/ Date: 2015-08-29 Tested On : Elementary Os - Firefox Software Link :...

Mock SMTP Server 1.0 Remote Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Mock SMTP Server 1.0 Remote Crash PoC Date: 23-08-2015 Exploit Author: Shankar Damodaran Author's Twitter : @sh4nx0r Vendor Homepage: http://mocksmtpserver.codeplex.com Software Link:...

GOM Audio 2.0.8 - '.gas' Crash (PoC)

Exploit Title: GOM Audio 2.0.8 Crash POC Date: 8/24/2015 Exploit Author: UnN0n Software Vendor : http://audio.gomlab.com/ Software Link: http://audio.gomlab.com/downloadlog.gom Version: 2.0.8 2015/06/17 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- open 'Goma.exe'. 2- Goto...

GOM Audio 2.0.8 - .gas Crash (PoC)

GOM Audio 2.0.8 - .gas Crash PoC Exploit Title: GOM Audio 2.0.8 Crash POC Date: 8/24/2015 Exploit Author: UnN0n Software Vendor : http://audio.gomlab.com/ Software Link: http://audio.gomlab.com/downloadlog.gom Version: 2.0.8 2015/06/17 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1-...

Mock SMTP Server 1.0 - Remote Crash (PoC)

!/usr/bin/python Exploit Title: Mock SMTP Server 1.0 Remote Crash PoC Date: 23-08-2015 Exploit Author: Shankar Damodaran Author's Twitter : @sh4nx0r Vendor Homepage: http://mocksmtpserver.codeplex.com Software Link: http://mocksmtpserver.codeplex.com/downloads/get/87077 Version: 1.0 Tested on:...

[CVE-2015-4624] Predictable CSRF tokens in WiFi Pineapple firmware <= 2.3.0

Overview =============== WiFi Pineapples are a penetration testing tool used in offensive wireless activities. These devices run on a modified OpenWRT based on netBSD operating system. They include a web-based management interface. It has been discovered they have predictable anti-CSRF tokens bas...

Microsoft Office 2007 MSO.dll Arbitrary Free Exploit

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=417&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testing and...

Vifi Radio 1 Shell Upload / CSRF

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Vifi Radio v1 - Arbitrary File Upload Vulnerability with CSRF My + Discovered by: KnocKout Contact : [email protected] HomePage :...

Microsoft Office 2007 MSO.dll Use-After-Free Exploit

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=414&can=1 The following crash was observed in MS Office 2007 running under Windows 2003 x86. Microsoft Office File Validation Add-In is disabled and application verified...

Konica Minolta FTP Utility 1.0 - Remote DoS PoC

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Konica Minolta FTP Utility 1.0 Remote DoS PoC Date: 21-08-2015 Exploit Author: Shankar Damodaran Vendor Homepage: http://www.konicaminolta.com/ Software Link:...

Microsoft Office 2007 - mso.dll Use-After-Free (MS15-081)

Microsoft Office 2007 - mso.dll Use-After-Free MS15-081 Source: https://code.google.com/p/google-security-research/issues/detail?id=414&can=1 The following crash was observed in MS Office 2007 running under Windows 2003 x86. Microsoft Office File Validation Add-In is disabled and application...

Microsoft Office 2007 - mso.dll Arbitrary Free (MS15-081)

Microsoft Office 2007 - mso.dll Arbitrary Free MS15-081 Source: https://code.google.com/p/google-security-research/issues/detail?id=417&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testin...

Microsoft Office 2007 MSPTLS Heap Index Integer Underflow Exploit

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=431&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testing and...

Microsoft Office 2007 - 'OGL.dll' DpOutputSpanStretch::OutputSpan Out of Bounds Write (MS15-080)

Source: https://code.google.com/p/google-security-research/issues/detail?id=420&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testing and reproduction. This bug also reproduced in Office...

Microsoft Office 2007 - 'wwlib.dll' Type Confusion (MS15-081)

Source: https://code.google.com/p/google-security-research/issues/detail?id=423&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testing and reproduction. This bug also reproduced in Office...

Konica Minolta FTP Utility 1.0 - Remote Denial of Service (PoC)

Konica Minolta FTP Utility 1.0 - Remote Denial of Service PoC !/usr/bin/python Exploit Title: Konica Minolta FTP Utility 1.0 Remote DoS PoC Date: 21-08-2015 Exploit Author: Shankar Damodaran Vendor Homepage: http://www.konicaminolta.com/ Software Link:...

Microsoft Office 2007 - wwlib.dll fcPlcfFldMom Uninitialized Heap Usage

Microsoft Office 2007 - wwlib.dll fcPlcfFldMom Uninitialized Heap Usage Source: https://code.google.com/p/google-security-research/issues/detail?id=424&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier...

Microsoft Office 2007 - 'mso.dll' Arbitrary Free (MS15-081)

Source: https://code.google.com/p/google-security-research/issues/detail?id=417&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testing and reproduction. This bug did not reproduce in Office...