5000 matches found
mesakon.com.tr XSS vulnerability
Vulnerable URL:...
Monitoring Windows Console Activity (Part 1)
Introduction While performing incident response, Mandiant encounters attackers actively using systems on a compromised network. This activity often includes using interactive console programs via RDP such as the command prompt, PowerShell, and sometimes custom command and control C2 console tools...
Monitoring Windows Console Activity (Part 1)
Introduction While performing incident response, Mandiant encounters attackers actively using systems on a compromised network. This activity often includes using interactive console programs via RDP such as the command prompt, PowerShell, and sometimes custom command and control C2 console tools...
autoanzeigen.de XSS vulnerability
Open Bug Bounty ID: OBB-285089 Description| Value ---|--- Affected Website:| autoanzeigen.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Android 'su' Privilege Escalation
This module uses the su binary present on rooted devices to run a payload as root. A rooted Android device will contain a su binary often linked with an application that allows the user to run commands as root. This module will use the su binary to execute a command stager as root. The command...
hilti.co.za XSS vulnerability
Open Bug Bounty ID: OBB-283380 Description| Value ---|--- Affected Website:| hilti.co.za Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ALPINE-CVE-2016-0634
The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine...
DEBIAN-CVE-2016-0634
The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine...
EggShell - iOS/macOS Remote Administration Tool
EggShell is an iOS and macOS post exploitation surveillance pentest tool written in Python. This tool creates 1 line multi stage payloads that give you a command line session with extra functionality. EggShell gives you the power and convenience of uploading/downloading files, taking pictures,...
August 16, 2017—KB4034661 (OS Build 14393.1613)
None None...
symboltraining.edu XSS vulnerability
Vulnerable URL: https://www.symboltraining.edu/Portals/default/Skins/symbol/FlashPlayerControl/player.swf?tracecall=prompt%27openbugbounty%27 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:|...
CVE-2017-7783
If a long user name is used in a username/password combination in a site URL such as " http://UserName:[email protected]", the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox 55...
UBUNTU-CVE-2017-7783
If a long user name is used in a username/password combination in a site URL such as " http://UserName:[email protected]", the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox 55...
git: git-prompt.sh does not sanitize branch names in $PS1
It was found that the git-prompt.sh script shipped with git failed to correctly handle branch names containing special characters. A specially crafted git repository could use this flaw to execute arbitrary commands if a user working with the repository configured their shell to include repositor...
XenMobile : Control OS update policy FAQ
Control OS policy The Control OS Updates device policy lets you deploy the latest OS updates to supervised iOS devices. You can specify how frequently XenMobile checks the device OS and deploys updates. There are two options -: 1. Download Only This option will just download OSupdate and custome...
swiftype.com XSS vulnerability
Vulnerable URL: https://swiftype.com/searchstq=%27%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C/script%3E=1 Details: Description| Value ---|--- Patched:| Yes, at 31.07.2017 Latest check for patch:| 31.07.2017 12:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...
avkvalves.se XSS vulnerability
Vulnerable URL: http://www.avkvalves.se/sv-se/searchresults?search=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...
reportworld.co.kr XSS vulnerability
Open Bug Bounty ID: OBB-259891 Description| Value ---|--- Affected Website:| reportworld.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...