924 matches found
New Linux Malware Exploits SambaCry Flaw to Silently Backdoor NAS Devices
Remember SambaCry? Almost two months ago, we reported about a 7-year-old critical remote code execution vulnerability in Samba networking software, allowing a hacker to remotely take full control of a vulnerable Linux and Unix machines. We dubbed the vulnerability as SambaCry, because of its...
Shodanwave - Explore & Obtain Information from Netwave IP Camera
Shodanwave is a tool for exploring and obtaining information from cameras specifically Netwave IP Camera. The tool uses a search engine called shodan that makes it easy to search for cameras online but not only that. Hack network cameras around the world, Very fun! What does the tool to? Look, a...
la-pleiade.fr XSS vulnerability
Vulnerable URL: http://www.la-pleiade.fr/searchengine/catalogue?searchText=%22%3E%3Csvg/onload=confirmOPENBUGBOUNTY%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 636988 VIP...
Challenges with Critical Infrastructure: IoT, Smart Cities Under Attack
Internet of Things technology is now more widespread than many people realize. Systems that fall under the IoT umbrella are popping up in an array of settings, even outside consumer circles. Today, every group from enterprise businesses to city governments is utilizing intelligent, internet- and...
Session Hijacking, Cookie-Stealing WordPress Malware Spotted
Researchers have identified a strain of cookie stealing malware injected into a legitimate JavaScript file, that masquerades as a WordPress core domain. Cesar Anjos, a security analyst at Sucuri, a firm that specializes in WordPress security, came across the malware during an incident response...
AntennaHouse DMC HTMLFilter Doc_SetSummary Code Execution Vulnerability
AntennaHouse DMC HTMLFilter DocSetSummary Code Execution Vulnerability Summary An exploitable heap corruption vulnerability exists in the DocSetSummary functionality of AntennaHouse DMC HTMLFilter. A specially crafted doc file can cause a heap corruption resulting in arbitrary code execution. An...
Shodan’ Malware Hunter to Expose Command & Control Centers of Botnets
By Jahanzaib Hassan Recorded Future, a threat intelligence company together with Shodan, which is an internet search engine connecting services to internet devices, have created an online crawler which they call the Malware Hunter. What does it do? The Malware Hunter is a program that sends out...
search.reimageplus.com XSS vulnerability
Vulnerable URL: http://search.reimageplus.com/?auto=〈=da'"/alert"openbugbounty"...
Media Search Engine Script - search Parameter SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Media Search Engine Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/media-search-engine-script/prod51.html Demo:...
Media Search Engine SQL Injection
Exploit Title: Media Search Engine Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/media-search-engine-script/prod51.html Demo: http://www.websitescripts.org/demo/mediasearchengine/...
Media Search Engine Script - 'search' SQL Injection
Exploit Title: Media Search Engine Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/media-search-engine-script/prod51.html Demo: http://www.websitescripts.org/demo/mediasearchengine/...
[SECURITY] Fedora 25 Update: drupal7-metatag-1.21-1.fc25
The Metatag module allows you to automatically provide structured metadata, aka "meta tags", about your website. In the context of search engine optimization, when people refer to meta tags they are usually referring to the meta description tag and the meta keywords tag that may help improve the...
[SECURITY] Fedora 24 Update: drupal7-metatag-1.21-1.fc24
The Metatag module allows you to automatically provide structured metadata, aka "meta tags", about your website. In the context of search engine optimization, when people refer to meta tags they are usually referring to the meta description tag and the meta keywords tag that may help improve the...
Metatag -Moderately Critical - Information disclosure - SA-CONTRIB-2017-019
This module enables you to add a variety of meta tags to a site for helping with a site's search engine results and to customize how content is shared on social networks. The module doesn't sufficiently protect against data being cached that might contain information related to a specific user...
Easy Web Search 3 SQL Injection
Exploit Title: Easy Web Search - PHP Search Engine with Image Search and Crawling System Script v3.0 - SQL Injection Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy:...
Easy Web Search 3 - 'id' SQL Injection
Exploit Title: Easy Web Search - PHP Search Engine with Image Search and Crawling System Script v3.0 - SQL Injection Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy:...
Netgear router password disclosure Vulnerability(CVE-2017-5521)
0x01 vulnerability overview NETGEAR is a United States well-known router manufacturers, its products are used worldwide extensively. Recently, foreign security researcher Simon Kenin find NETGEAR router more series there is a password leak Vulnerability, CVE-2017-5521-in. When the router Password...
Inout Search Engine Ultimate Edition 7.0/8.0 Script - Improper Access Restrictions
Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout Search Engine Ultimate Edition Script Script Version: v7.0, v8.0 Script Buy Now: http://www.inoutscripts.com/demo/inout-search-engine/demo/ Author: İhsan Şencan Author Web:...
Inout Search Engine Ultimate Edition 7.08.0 Script - Improper Access Restrictions
Inout Search Engine Ultimate Edition 7.08.0 Script - Improper Access Restrictions Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout Search Engine Ultimate Edition Script Script Version: v7.0, v8.0 Script Buy Now:...