5421 matches found
CVE-2017-7150
An issue was discovered in certain Apple products. macOS before 10.13 Supplemental Update is affected. The issue involves the "Security" component. It allows attackers to bypass the keychain access prompt, and consequently extract passwords, via a synthetic click...
Polycom Command Shell Authorization Bypass
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Polycom Command Shell Authorization Bypass', 'Alias' = 'polycomhdxauthbypass', 'Author' = 'Paul Haas ', module 'h00die ', submission/cleanup ,...
Mozilla Firefox 55 - Denial of Service
Mozilla Firefox 55 - Denial of Service Exploit Title: Mozilla Firefox Firefox Lockout Vulnerability"; //Content to be forcibly viewed echo ""; //End echo "setTimeout"location.href ='".$location."';",10000;"; ? Solution: Update to version 55 https://www.mozilla.org/en-US/firefox/55.0/releasenotes/...
Mozilla Firefox < 55 - Denial of Service
Exploit Title: Mozilla Firefox Firefox Lockout Vulnerability"; //Content to be forcibly viewed echo ""; //End echo "setTimeout"location.href ='".$location."';",10000;"; ? Solution: Update to version 55 https://www.mozilla.org/en-US/firefox/55.0/releasenotes/ Mozilla Foundation Security Advisory:...
uta.edu XSS vulnerability
Vulnerable URL: http://www.uta.edu/ssw/news/releases/topics.php?tag=%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10785 VIP website status:| Yes...
shoplc.com XSS vulnerability
Vulnerable URL: https://www.shoplc.com/unbxdSearch/?topCatSearch=All=aaaaaaaaaaaaaaaaaa'-prompt/OPENBUGBOUNTY/-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 172361 VIP website...
Ian Dunn: Timing Attack in Google Authenticator - Per User Prompt
Google Authenticator - Per User Prompt contains a timing attack vulnerability in how it validates the application password for a user account. if sha1 $attemptedpasswordplaintext === $validpasswordhash || wpcheckpassword $attemptedpasswordplaintext, $validpasswordhash...
home.uchicago.edu XSS vulnerability
Open Bug Bounty ID: OBB-332125 Description| Value ---|--- Affected Website:| home.uchicago.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
arttodaygallery.com XSS vulnerability
Open Bug Bounty ID: OBB-331299 Description| Value ---|--- Affected Website:| arttodaygallery.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Secure Web Error Connection has timed out reconnect to Secure Home to access work resources.
When Secure Web for iOSislaunched. We receivean error right away "Your connection has timed out. Please reconnect to Secure Hub to access work resources "Cancel, connect. If users clicks connect it redirects back to Secure Hub, prompts users to enter PIN/password. Then it redirects back to Secure...
horloge.gratuite.online.fr XSS vulnerability
Vulnerable URL: http://horloge.gratuite.online.fr/GHv1/script.php?image=http://horloge.gratuite.online.fr/GHv1/img/04112011185736.gif=022=1=800000=1=FFDAB9="prompt/openbugbounty/...
app.kapanlagi.com XSS vulnerability
Vulnerable URL: http://app.kapanlagi.com/game/playfullpage.php?id=7399=Majestic+Billiardsprompt/OPENBUGBOUNTY/...
mesakon.com.tr XSS vulnerability
Vulnerable URL:...
Monitoring Windows Console Activity (Part 1)
Introduction While performing incident response, Mandiant encounters attackers actively using systems on a compromised network. This activity often includes using interactive console programs via RDP such as the command prompt, PowerShell, and sometimes custom command and control C2 console tools...
Monitoring Windows Console Activity (Part 1)
Introduction While performing incident response, Mandiant encounters attackers actively using systems on a compromised network. This activity often includes using interactive console programs via RDP such as the command prompt, PowerShell, and sometimes custom command and control C2 console tools...
autoanzeigen.de XSS vulnerability
Open Bug Bounty ID: OBB-285089 Description| Value ---|--- Affected Website:| autoanzeigen.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Android 'su' Privilege Escalation
This module uses the su binary present on rooted devices to run a payload as root. A rooted Android device will contain a su binary often linked with an application that allows the user to run commands as root. This module will use the su binary to execute a command stager as root. The command...
hilti.co.za XSS vulnerability
Open Bug Bounty ID: OBB-283380 Description| Value ---|--- Affected Website:| hilti.co.za Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
