RVM automatically installs gems as specified by files in $PWD

RVM, by default, hooks cd and automatically parses a file named .versions.conf in the directory being changed to. This file can provide the names of arbitrary gems, via ruby-gem-install entries, which will be automatically passed to gem install upon cd into the directory. The code responsible, as...

NVIDIA Driver 375.70 - Buffer Overflow in Command Buffer Submission Vulnerability

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1012 DxgkDdiSubmitCommandVirtual is the function implemented by the kernel mode driver responsible for submitting a command buffer to the GPU. One of the arguments passed contains...

Joomla Music Collection 3.0.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component Music Collection 3.0.3 - SQL Injection Home : https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/music-collection/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM...

NVIDIA Driver 375.70 - Buffer Overflow in Command Buffer Submission

NVIDIA Driver 375.70 - Buffer Overflow in Command Buffer Submission Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1012 DxgkDdiSubmitCommandVirtual is the function implemented by the kernel mode driver responsible for submitting a command buffer to the GPU. One of the arguments...

LG G4 - lgdrmserver Binder Service Multiple Race Conditions

LG G4 - lgdrmserver Binder Service Multiple Race Conditions Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=986 The lgdrmserver binder service /system/bin/lgdrmserver implements a handle system to store pointers to objects allocated by the drm implementation...

LG G4 - lghashstorageserver Directory Traversal Vulnerability

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=987 The lghashstorageserver binder service /system/bin/lghashstorageserver implementation on the LG G4 is vulnerable to path traversal, allowing an app to read and write 0x20 bytes...

LG G4 - lgdrmserver Binder Service Multiple Race Conditions Vulnerability

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=986 The lgdrmserver binder service /system/bin/lgdrmserver implements a handle system to store pointers to objects allocated by the drm implementation /system/lib/liblgdrm.so. In...

Microsoft Edge - TypedArray.sort Use-After-Free (MS16-145)

!-- Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=983 There is a use-after-free in TypedArray.sort. In TypedArrayCompareElementsHelper https://chromium.googlesource.com/external/github.com/Microsoft/ChakraCore/+/TimeTravelDebugging/lib/Runtime/Library/TypedArray.cpp, the...

Joomla GeoContent 4.5 Component - Cross-site scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component GeoContent 4.5 - Cross-site scripting Date: 2017-02-13 Home : https://extensions.joomla.org/extensions/extension/maps-a-weather/geotagging/geocontent/ Exploit Author: Persian Hack Team Discovered by : Mojtaba...

Joomla Sponsor Wall 7.0 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component Sponsor Wall 7.0 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/sponsor-wall/ Exploit Author: Persian Hack Team Discovered by : Mojtaba Mobha...

Joomla Soccer Bet 4.1.5 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component Soccer Bet 4.1.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/sports-a-games/tips-a-betts/soccer-bet/ Exploit Author: Persian Hack Team Discovered by : Mojtaba Mobha...

Joomla onisQuotes 2.5 Component - SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla Component onisQuotes 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/news-display/quotes/onisquotes/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM...

Joomla onisQuotes 2.5 SQL Injection

Exploit Title: Joomla Component onisQuotes 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/news-display/quotes/onisquotes/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir/ Telegram...

Joomla onisPetitions 2.5 SQL Injection

Exploit Title: Joomla Component onisPetitions 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/contacts-and-feedback/polls/onispetitions/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home :...

Coursera: XSS Stored

Hi Coursera, This is AhsanKhan, An Ethical Hacker. I Have Found Stored XSS In Your Site : https://translate-coursera.org/ Now I Am Going To Show You. 1.Create An Account In Your Site. https://www.coursera.org 2.And Put This Script in First Name. " 3.Save it : 4.Account Created now Go to this Web...

Joomla! Component onisPetitions 2.5 - 'tag' SQL Injection

Exploit Title: Joomla Component onisPetitions 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/contacts-and-feedback/polls/onispetitions/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home :...

Joomla! Component onisQuotes 2.5 - 'tag' SQL Injection

Exploit Title: Joomla Component onisQuotes 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/news-display/quotes/onisquotes/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir/ Telegram...

Joomla! Component Vik Booking 1.7 - SQL Injection

Exploit Title: Joomla Component Vik Booking 1.7 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extension/vik-booking/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir/ Telegram Channel AND Demo:...

WordPress: Infrastructure - Photon - SSRF

Description ------------------------ The service Photon located at http://i0.wp.com/ and described at https://code.trac.wordpress.org/browser/photon/ is vulnerable to Http SSRF via. redirect. The redirect can go to any IP including inside of any firewall photon might be inside any port and can ad...

WordPress REST API content injection vulnerability analysis-vulnerability warning-the black bar safety net

Author: Lucifaer 0x00 vulnerability description 1. Vulnerability description In the REST API automatically included in Wordpress4. 7 or more version, the WordPress REST API provides a set of easy-to-use HTTP endpoint, you can use the user in a simple JSON format to access the site's data,...