1369 matches found
hibernate-validator: Privilege escalation when running under the security manager
It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...
hibernate-validator: Privilege escalation when running under the security manager
It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...
Multiple Vulnerabilities in Yunyou CMS Enterprise Website Management System
Yunyou CMS enterprise website management system is a professional marketing enterprise building system based on PHP + MYSQL as the core development. A file upload and reflective cross-site scripting vulnerability exists in the CloudUnion CMS enterprise website management system. The vulnerability...
Amber - POC Reflective PE Packer
Amber is a proof of concept packer, it can pack regularly compiled PE files into reflective PE files that can be used as multi stage infection payloads. If you want to learn the packing methodology used inside the Amber check out below. PS: This is not a complete tool some things may break so tak...
Reflective cross-site scripting vulnerability in Zendo Project Management Software (open source version) jump page
Zendo is an open source project management software. A reflective cross-site scripting vulnerability exists in the jump page of Zendo project management software open source version. An attacker can construct XSS statements and perform pop-up box operations to obtain user cookies and other...
Detecting reflective DLL loading with Windows Defender ATP
Today's attacks put emphasis on leaving little, if any, forensic evidence to maintain stealth and achieve persistence. Attackers use methods that allow exploits to stay resident within an exploited process or migrate to a long-lived process without ever creating or relying on a file on disk. In...
Detecting reflective DLL loading with Windows Defender ATP
Today's attacks put emphasis on leaving little, if any, forensic evidence to maintain stealth and achieve persistence. Attackers use methods that allow exploits to stay resident within an exploited process or migrate to a long-lived process without ever creating or relying on a file on disk. In...
hibernate-validator: Privilege escalation when running under the security manager
It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...
Razer US: XSS on Saved Carts page
The saved cart endpoint was vulnerable to a reflective XSS due to lack of sanitization of cartcode which is inserted back in the HTML document, which could allow execution of malicious Javascript on the client...
Reflective Cross-site Scripting Vulnerability in the CMS Cluster Management System of Guizhou Baishijia Technology Group Co.
The Bioscor CMS Cluster Management System is a content management system. A reflective cross-site scripting vulnerability exists in the Baishijia CMS cluster management system of Guizhou Baishijia Technology Group Corporation, which is due to the system's failure to strictly filter user input...
Windows Escalate UAC Protection Bypass (In Memory Injection) Abusing WinSXS
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/exe' class MetasploitModule 'Windows Escalate UAC Protection Bypass In Memory Injection abusing WinSXS', 'Description' = %q This module will...
Privilege Escalation
hibernate-validator is vulnerable to privilege escalation attacks. When the security manager is used, its reflective permissions allow the access to private members...
hibernate-validator: Privilege escalation when running under the security manager
It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...
hibernate-validator: Privilege escalation when running under the security manager
It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...
hibernate-validator: Privilege escalation when running under the security manager
It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...
Windows Meterpreter (Reflective Injection x64), Windows x64 Reverse Named Pipe (SMB) Stager
Inject the meterpreter server DLL via the Reflective Dll Injection payload staged. Requires Windows XP SP2 or newer. Connect back to the attacker via a named pipe pivot This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...
OURPHP front reflective XSS
No description provided by source...
Reflected Cross-Site Scripting Vulnerability in ZYCHCMS V06 /admin/up.asp Page
ZYCHCMS is an enterprise website management system. A reflective cross-site scripting vulnerability exists in the ZYCHCMS V06 /admin/up.asp page. An attacker can construct an XSS statement to operate a pop-up box and obtain sensitive information such as a user's cookie...
Reflected Cross-Site Scripting Vulnerability in ZYCHCMS V06 /Include/map.asp Page
ZYCHCMS is an enterprise website management system. A reflective cross-site scripting vulnerability exists in the ZYCHCMS V06 /Include/map.asp page. The vulnerability allows an attacker to construct an XSS statement and perform pop-up box operations to obtain sensitive information such as user...
Cross site scripting
Multiple Reflective cross-site scripting XSS vulnerabilities in search and display of event data in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML, as demonstrated by the fName parameter...