Easy File Sharing HTTP Server 7.2 SEH Overflow

No description provided by source...

CVE-2016-2820

The Firefox Health Reports aka FHR or about:healthreport feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element...

CVE-2016-2820

CVE-2016-2820 affects Mozilla Firefox before 46.0, tied to the Firefox Health Reports (FHR) feature. The root cause is failure to properly restrict the origin of events within the remote-report IFRAME, enabling a remote attacker to influence sharing preferences by injecting events from untrusted ...

Firefox < 46 Multiple Vulnerabilities

The version of Firefox installed on the remote Windows host is prior to 46. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an attacker to corrupt memory, resulting in the execution of arbitrary code. CVE-2016-2804, CVE-2016-2806,...

Mozilla Firefox Injection Vulnerability

Mozilla Firefox Health Report is a plug-in developed by the Mozilla Foundation for understanding the performance of the Firefox browser. It collects some usage data from the users, and then provides the stability and performance of the Firefox browser, as well as optimization tips. An injection...

UBUNTU-CVE-2016-2820

The Firefox Health Reports aka FHR or about:healthreport feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element...

CVE-2016-2820

The Firefox Health Reports aka FHR or about:healthreport feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element...

Misunderstanding APT Indicators of Compromise

Threatpost Op-Ed is a regular feature where experts contribute essays and commentary on what’s happening in security and privacy. Today’s contributors are Dave Dittrich and Katherine Carpenter. Reports of APT activities detail compromises spanning multiple organizations, sectors, industry...

GitLab: Privilege escalation to access all private groups and repositories

Vulnerability details There is an insecure direct object reference IDOR issue in the group sharing feature for a project. This allows an attacker to get access to the names of private repositories of a group, issues, milestones, and the group its team members. Proof of concept First, lets set up...

DEBIAN-CVE-2015-8550

Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service host OS crash or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability...

C & C++ for OS - Filter Bypass & Persistent Vulnerability

Document Title: =============== C & C++ for OS - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1825 Release Date: ============= 2016-04-13 Vulnerability Laboratory ID VL-ID: ====================================...

Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability

Document Title: =============== Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1813 Release Date: ============= 2016-04-05 Vulnerability Laboratory ID VL-ID: ====================================...

Easy File Sharing HTTP Server 7.2 - Remote Overflow (SEH) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Easy File Sharing HTTP Server 7.2 SEH Overflow', 'Description' = %q This module exploits a SEH overflow in the Easy File Sharin...

Data Leaking 'Surreptitious Sharing' Vulnerability Identified in Android API

Researchers have identified a vulnerability in an Android API used by messaging apps such as Skype and perhaps more concerning, privacy-centric apps such as Signal, and Telegram, that could lead to privilege escalation and data loss including private keys. Dominik Schürmann and Lars Wolf,...

Easy File Sharing HTTP Server 7.2 SEH Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Easy File Sharing HTTP Server 7.2 SEH Overflow', 'Description' = %q This module exploits a SEH overflow in the Easy File Sharin...

Swift WiFi:Global WiFi Sharing - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Swift WiFi:Global WiFi Sharing published at the 'play' market has multiple vulnerabilities...

Zapya - File Sharing, Transfer - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Zapya - File Sharing, Transfer published at the 'play' market has multiple vulnerabilities...

SMB File Sharing - Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application SMB File Sharing published at the 'play' market has multiple vulnerabilities...

PentestBox 2.0 - Portable Penetration Testing Distribution for Windows Environments

PentestBox provides all security tools as a software package, eliminating requirement of Virtual machines or dualboot environments on Windows Operating System. It is created because more than 50% of penetration testing distribution users uses windows. Source So it provides an efficient platform f...

Open edX edx-platform design vulnerability

Open edX edx-platform is a free and open source course management system CMS created by Harvard University and the Massachusetts Institute of Technology Harvard and MIT. The system can be used for MOOCs Massive Open Online Courses as well as smaller courses and training modules. Open edX...