TCP Bindshell with Password Prompt - 162 bytes

TCP Bindshell with Password Prompt - 162 bytes. Shellcode exploit for linux platform /--------------------------------------------------------------------------------------------------------------------- / Title: tcp bindshell with password prompt in 162 bytes Author: Sathish kumar Contact:...

Linux/x86-64 - Bindshell 4444/TCP with Password Prompt Shellcode (162 bytes)

/--------------------------------------------------------------------------------------------------------------------- / Title: tcp bindshell with password prompt in 162 bytes Author: Sathish kumar Contact: https://www.linkedin.com/in/sathish94 Description: x64 Linux bind TCP port shellcode on po...

Mail.ru: reflected in xss

hello i found vulnerability cross site scripting https://touch.mail.ru This vulnerability affects /cgi-bin/passremind. Attack details Cookie input VID was set to 14svrC28zu5Q1MWh0r"prompt979663" The input is reflected inside tag between single quotes. Request GET /cgi-bin/passremind HTTP/1.1...

GLSA-201512-03 : GRUB: Authentication bypass

The remote host is affected by the vulnerability described in GLSA-201512-03 GRUB: Authentication bypass An integer underflow in GRUBs username/password authentication code has been discovered. Impact : An attacker with access to the system console may bypass the username prompt by entering a...

champspublichealth.com XSS vulnerability

Vulnerable URL: http://www.champspublichealth.com/videos/videoplayer.php?VideoFile=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

helpdesk.cps-datensysteme.de XSS vulnerability

Open Bug Bounty ID: OBB-113127 Description| Value ---|--- Affected Website:| helpdesk.cps-datensysteme.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

timbercon.com XSS vulnerability

Vulnerable URL: http://timbercon.com:9090/webchat/email/offline-mail.jsp?workgroup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Oracle BeeHive 2 - 'voice-servlet processEvaluation()' Write File (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Oracle BeeHive 2 voice-servlet processEvaluation Vulnerability", 'Description' = %q This module exploits a vulnerability found in...

davidtsmith.com XSS vulnerability

Vulnerable URL: https://www.davidtsmith.com/newsite/customkitbathroomsimage.asp?image=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

imagefap.com XSS vulnerability

Vulnerable URL: http://www.imagefap.com/clubs.php?avatar=1=1category=1=1=1=25=1;=0=10=1'%22%26%25prompt/XSSPOSED/...

crystalballroompdx.com XSS vulnerability

Open Bug Bounty ID: OBB-108159 Description| Value ---|--- Affected Website:| crystalballroompdx.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

icedtea-web: applet origin spoofing

It was discovered that IcedTea-Web did not properly determine an applet's origin when asking the user if the applet should be run. A malicious page could use this flaw to cause IcedTea-Web to execute the applet without user approval, or confuse the user into approving applet execution based on an...

fhg.grannybet.com XSS vulnerability

Vulnerable URL: http://fhg.grannybet.com/pics/0101905/index.php?nats=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

advertolog.com XSS vulnerability

Vulnerable URL: http://www.advertolog.com/commercials/search/?x=0=0=999%22%3E%3Csvg/onload=prompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

berep.elections.il.gov XSS vulnerability

Vulnerable URL: https://berep.elections.il.gov/Leaving.aspx?URL=%22%20onmouseover=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

awards.rbc.ru XSS vulnerability

Vulnerable URL: http://awards.rbc.ru/nominees/rejting-rbc-25--prompt/XSSPOSED/...

Microsoft doesn’t want Windows 10 Users to Switch to Chrome or Firefox

Microsoft wants Windows 10 users to use its Edge browser, and the company is pulling every trick out to make it happen. In a newly leaked Windows 10 preview release build 10568, Microsoft has added a new prompt that appears whenever you try to switch away from default apps, including Microsoft...

Safari User-Assisted Applescript Exec Attack

In versions of Mac OS X before 10.11.1, the applescript:// URL scheme is provided, which opens the provided script in the Applescript Editor. Pressing cmd-R in the Editor executes the code without any additional confirmation from the user. By getting the user to press cmd-R in Safari, and by...

barilla.be XSS vulnerability

Vulnerable URL: http://www.barilla.be/befr/recettesmenus/Rechercherdesrecettes/searchricette.jsp?ingrediente=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=ingrediente+ingredientebarilla=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=Barilla-ricette-frbe=5=5 Details: Description|...

Bug in iOS and OSX Allows Writing of Arbitrary Files Via AirDrop

There is a major vulnerability in a library in iOS that allows an attacker to overwrite arbitrary files on a target device and, when used in conjunction with other techniques, install a signed app that the device will trust without prompting the user with a warning dialog. The vulnerability lies ...