2866 matches found
lak.co.kr XSS vulnerability
Vulnerable URL: https://www.lak.co.kr/community/file.php/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2236886 VIP website status:| No Coordinat...
Serverless, Real-time Malware Detection: BinaryAlert
BinaryAlert is an open-source serverless AWS pipeline where any file uploaded to an S3 bucket is immediately scanned with a configurable set of YARA rules. An alert will fire as soon as any match is found, giving an incident response team the ability to quickly contain the threat before it spread...
Course Name Disclosure
Moodle is vulnerable to course name disclosure. Authenticated attackers can leverage a flaw in admin/tool/monitor/lib.php to find hidden course names by subscribing to rules. These attacks are possible because moodle ignores the moodle/course:viewhiddencourses capability...
Unauthorized Calendar Modification
Moodle is vulnerable to unauthorized calendar modification. The application does not check for capabilities for editing the calendar, allowing a malicious user to delete course level calendar subscription created by teacher users...
WMI Event Subscription Persistence
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' require 'msf/core/post/windows/powershell' require 'msf/core/post/file' class MetasploitModule 'WMI Event Subscription Persistence',...
WMI Event Subscription Persistence Exploit
This Metasploit module will create a permanent WMI event subscription to achieve file-less persistence using one of five methods. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell'...
Best Practical Solutions Request Tracker Remote Code Execution Vulnerability
Best Practical Solutions Request Tracker RT is an enterprise-grade, open source issue tracking system from Best Practical Solutions in the United States. The system has Bug tracking , customer service , customized workflow and other features . A security vulnerability exists in the dashboard...
gohomeltd.com XSS vulnerability
Vulnerable URL: http://www.gohomeltd.com/Store/Subscription.asp?ResponseID=1"...
UBUNTU-CVE-2017-5944
The dashboard subscription interface in Request Tracker RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain privileges to execute arbitrary code via a crafted saved search name...
'Shadow Brokers' Threatens to Unmask A Hacker Who Worked With NSA
The Shadow Brokers, a notorious hacking group that leaked US cyberweapons — which were also abused by the recent ransomware disasters WannaCry and Petya or NotPetya — has now threatened to unmask the identity of a former hacker who worked for the NSA. Besides this, the Shadow Brokers group has al...
brokerworldmag.com XSS vulnerability
Vulnerable URL: http://www.brokerworldmag.com/page/bgasubscription.php?follow=1/-///'/"//--...
Authorization Bypass
Moodle is vulnerable to authorization bypass. The library does not consider if a forum is optional, allowing a malicious user to bypass forum-subscription requirements through the student role and unsubscribing from all forums...
WMI Event Subscription Persistence
This module will create a permanent WMI event subscription to achieve file-less persistence using one of five methods. The EVENT method will create an event filter that will query the event log for an EVENTIDTRIGGER default: failed logon request id 4625 that also contains a specified...
Shadow Brokers Launches 0-Day Exploit Subscriptions for $21,000 Per Month
As promised to release more zero-days exploits and hacking tools for various platforms starting from June 2017, the infamous hacking group Shadow Brokers is back with more information on how to subscribe and become a private member for receiving exclusive access to the future leaks. The Shadow...
update.ph XSS vulnerability
Vulnerable URL: http://www.update.ph/free-subscription Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 149835 VIP website status:| No Check update.ph SSL connection:| Grade: A+...
Shadow Brokers, Who Leaked WannaCry SMB Exploit, Are Back With More 0-Days
The infamous hacking collective Shadow Brokers – the one who leaked the Windows SMB exploit in public that led to last weekend's WannaCrypt menace – are back, this time, to cause more damage. In typically broken English, the Shadow Brokers published a fresh statement with full of frustration a fe...
EulerOS 2.0 SP1 : subscription-manager, python-rhsm (EulerOS-SA-2016-1069)
According to the version of the subscription-manager, python-rhsm packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that subscription-manager set weak permissions on files in /var/lib/rhsm/, causing an information disclosur...
vlinde.com XSS vulnerability
Vulnerable URL: https://www.vlinde.com/?utmsource=knoxss.me"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 496840 VIP website status:| No Check vlinde.com SSL connection:|...
wolfram.com XSS vulnerability
Vulnerable URL: http://wolfram.com/broadcast/video.php?sx==1325=wordcloud Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3209 VIP website status:| Yes Coordinated Disclosure...
