Mozilla: Use-after-free with SMIL animation controller

A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leav...

Mozilla: Use-after-free with SMIL animation controller

A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leav...

WinMPG Video Convert Local Dos Exploit

Exploit Title: WinMPG Video Convert Local Dos Exploit Date: 15.03.2019 Vendor Homepage:http://www.winmpg.com Software Link: http://www.winmpg.com/down/WinMPGVideoConvert.zip Exploit Author: Achilles Tested Version: 9.3.5 and older ones Tested on: Windows XP SP3 EN 1.- Run python code :WinMPG.py 2...

InnoGames: Race condition in activating email resulting in infinite amount of diamonds received

There was a race condition, in the registration process, that might have given the attacker an advantage in the game by gaining additional premium in-game currency without paying for it. Summary: This is an interesting critical race condition that might give the attacker an advantage in the game ...

Arbitrary Password Change Vulnerability in Zhi Rui Elementary and Middle School Students' School Registration Information Management System

Zhirui Elementary and Middle School Students' School Registration Information Management System is an information system that collects students' basic information and reports it to the education administration department. There is an arbitrary password change vulnerability in Zhirui Elementary an...

SQL Injection Vulnerability in Zhirui Elementary and Middle School Students' School Registration Information Management System

Zhirui Elementary and Middle School Students' School Registration Information Management System is an information system that collects students' basic information and reports it to the education administration department. SQL injection vulnerability exists in Zhirui Primary and Secondary School...

Call for Papers | Microsoft BlueHat Shanghai 2019

The Microsoft Security Response Center MSRC recently announced our first BlueHat security conference in Shanghai which will take place on May 29-30, 2019. After 15 years of BlueHat events in Redmond, Washington and Israel, we are thrilled to expand to a new location. We work with many talented...

The vulnerability of the Jenkins automation server allows a hacker to reuse registration data or session identifiers for authentication purposes.

The vulnerability of the Jenkins automation server is related to incorrect session duration. Exploiting this vulnerability allows a malicious actor to repeatedly use registration data or session identifiers for authentication purposes...

eCar Insurance Coverage App Has Logic Flaw Vulnerability

eCar Insurance is a mobile Internet car insurance software application platform developed by Chengdu Zhongtong Technology Co. eCar Insurance APP has a logic flaw vulnerability, the vulnerability stems from the SMS verification code in the data return packet plaintext display, the attacker can use...

TeamCity < 9.0.2 - Disabled Registration Bypass Exploit

TeamCity 9.0.2 - Disabled Registration Bypass Exploit var login = 'testuser'; //логин пользователя var password = 'SuperMEgaPa$$'; //пароль var email = 'email protected'; // email / Code / var b = BS.LoginForm; var publickey = $F"publicKey"; var encryptedpass = BS.Encrypt.encryptDatapassword,...

TeamCity Disabled Registration Bypass

var login = 'testuser'; //DD3/4D3D,D1/2 D?D3/4DNDD3/4D2DdegNDuDN var password = 'SuperMEgaPa$$'; //D?DdegND3/4DN var email = '[email protected]'; // email / Code / var b = BS.LoginForm; var publickey = $F"publicKey"; var encryptedpass = BS.Encrypt.encryptDatapassword, $F"publicKey";...

ICSJWG Spring Meeting and Call for Abstracts (Deadline Extended)

The Industrial Control Systems Joint Working Group ICSJWG—a collaborative and coordinating body operating under the Critical Infrastructure Partnership Advisory Council CIPAC framework—will hold the 2019 ICSJWG Spring Meeting in Kansas City, MO, April 23–25, 2019. The Spring Meeting kicks off the...

Imperva SecureSphere 13.x PWS Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Imperva SecureSphere PWS Command Injection', 'Description' = %q This module exploits a command injection vulnerability in Imperva SecureSphere...

Imperva SecureSphere 13.x PWS Command Injection Exploit

This Metasploit module exploits a command injection vulnerability in Imperva SecureSphere version 13.x. The vulnerability exists in the PWS service, where Python CGIs did not properly sanitize user supplied command parameters and directly passes them to corresponding CLI utility, leading to comma...

Hackers Sell Access to Bait-and-Switch Empire

Cybercriminals are auctioning off access to customer information stolen from an online data broker behind a dizzying array of bait-and-switch Web sites that sell access to a vast range of data on U.S. consumers, including DMV and arrest records, genealogy reports, phone number lookups and people...

The vulnerability of the Cisco Elastic Services Controller network management tool, which stems from the use of pre-installed registration data, allows a perpetrator to escalate their privileges.

The vulnerability of the Cisco Elastic Services Controller network management tool is related to the use of pre-installed registration data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

CVE-2018-12399

When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about which domain is registering the new protocol. This may result in the user approving a protocol handler that they otherwise would not have. This vulnerability affects Firefox 63...

Spoofing

When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about which domain is registering the new protocol. This may result in the user approving a protocol handler that they otherwise would not have. This vulnerability affects Firefox 63...

The vulnerability in the get_getnetworkconf.cgi script of the Orange Livebo wireless router’s microprogramming software allows a attacker to gain access to protected information.

The vulnerability in the getgetnetworkconf.cgi script of the wireless router’s microprogramming system is caused by a error in the management of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected information using the HTTP...

Vembu StoreGrid Cross-Site Scripting Vulnerability

Vembu StoreGrid is a suite of enterprise-class data backup software from Vembu USA. A cross-site scripting vulnerability exists in several files in Vembu StoreGrid version 4.4.x, which can be exploited by a remote attacker to inject arbitrary Web script or HTML. The files include:...