1246 matches found
Deserialization of untrusted data
Verax NMS prior to 2.1.0 leaks connection details when any user executes a Repair Table action...
CVE-2013-1631
Verax NMS prior to 2.1.0 leaks connection details when any user executes a Repair Table action...
CVE-2020-3941
The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed. This vulnerability is not present in VMware Tools 11.x.y since the affected functionality is not present in VMware Tools 11...
Advanced System Repair Pro Insecure File Insecure File Permissions Vulnerability
Advanced System Repair Pro is an advanced system repair software that provides users with system problem fixing, junk cleaning, disk organizing, privacy protection, registry cleaning, PC optimization and more. Advanced System Repair Pro Insecure File suffers from an insecure file permission...
WordPress Computer Repair Shop plugin <= 1.0 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability discovered by Jeroen Mulder in WordPress Computer Repair Shop plugin versions = 1.0. Solution Update the WordPress Computer Repair Shop plugin to the latest available version at least 2.0...
Computer Repair Shop < 2.0 - Authenticated Stored XSS
Computer Repair Shop is vulnerable to stored XSS. When a user has admin capabilities, malicious code can be submitted through the plugin's options. Fixed in version 2.0. PoC The plugin's options provided a basic HTML validation, which could be bypassed by copying + pasting malicious code into the...
Advanced System Repair Pro 1.9.1.7 Insecure File Permissions
Exploit Title: Advanced System Repair Pro 1.9.1.7 - Insecure File Permissions Exploit Author: ZwX Exploit Date: 2020-01-12 Vendor Homepage : https://advancedsystemrepair.com/ Software Link: http://advancedsystemrepair.com/ASRProInstaller.exe Tested on OS: Windows 10 Proof of Concept PoC:...
Advanced System Repair Pro 1.9.1.7 - Insecure File Permissions
Advanced System Repair Pro 1.9.1.7 - Insecure File Permissions Exploit Title: Advanced System Repair Pro 1.9.1.7 - Insecure File Permissions Exploit Author: ZwX Exploit Date: 2020-01-12 Vendor Homepage : https://advancedsystemrepair.com/ Software Link:...
Advanced System Repair Pro 1.9.1.7 - Insecure File Permissions
Exploit Title: Advanced System Repair Pro 1.9.1.7 - Insecure File Permissions Exploit Author: ZwX Exploit Date: 2020-01-12 Vendor Homepage : https://advancedsystemrepair.com/ Software Link: http://advancedsystemrepair.com/ASRProInstaller.exe Tested on OS: Windows 10 Proof of Concept PoC:...
Computer Repair Shop < 2.0 - Authenticated Stored XSS
Computer Repair Shop is vulnerable to stored XSS. When a user has admin capabilities, malicious code can be submitted through the plugin's options. Fixed in version 2.0. The plugin's options provided a basic HTML validation, which could be bypassed by copying + pasting malicious code into the...
Advanced System Repair Pro 1.9.1.7 - Insecure File Permissions Vulnerability
Exploit Title: Advanced System Repair Pro 1.9.1.7 - Insecure File Permissions Exploit Author: ZwX Vendor Homepage : https://advancedsystemrepair.com/ Software Link: http://advancedsystemrepair.com/ASRProInstaller.exe Tested on OS: Windows 10 Proof of Concept PoC: ==========================...
VMSA-2020-0002:VMware Tools workaround addresses a local privilege escalation vulnerability
Advisory ID: VMSA-2020-0002 CVSSv3 Range: 7.8 Issue Date:2020-01-14 Updated On: 2020-01-14 Initial Advisory CVEs: CVE-2020-3941 Synopsis: VMware Tools workaround addresses a local privilege escalation vulnerability CVE-2020-3941 RSS Feed Download PDF Download Text File Share this page on social...
Twitter Now Has Better Two-Factor Authentication, So Use It
A hacking bounty, right to repair, and more of the week's top security news...
FastJson denial of service attack warning-vulnerability warning-the black bar safety net
0x00 vulnerability background 2019 9 November 5, 360CERT monitoring to 2019 9 November 3 fastjson in the commit 995845170527221ca0293cf290e33a7d6cb52bf7 presented is designed to repair when the string contains\x escape characters may lead to OOM issues of repair. 360CERT determine the vulnerabili...
Veeam Availability Orchestrator v2 Patch 1 (build 1463)
Challenge This patch fixes the following issue found in VAO 2.0. The presence of backup job objects created by Veeam plug-in backup jobs cause VAO Restore Plans to fail locating valid restore points required for the restore process. The following example shows the issue found in the Readiness Che...
cPanel cross-site scripting vulnerability (CNVD-2019-30470)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Repair Mailbox Permissions interface in versions prior to cPanel 60.0.25...
CVE-2016-10767
cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface SEC-159...
CVE-2016-10767
cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface SEC-159...