6594 matches found
Top Password Software Dialup Password Recovery 1.30 - Denial of Service Exploit
Exploit Title: Top Password Software Dialup Password Recovery 1.30 - Denial of Service PoC Exploit Author: Antonio de la Piedra Vendor Homepage: https://www.top-password.com/ Software Link: https://www.top-password.com/download/DialupPRSetup.exe Version: 1.30 Tested on: Windows 7 SP1 32-bit Copy...
Top Password Firefox Password Recovery 2.8 - Denial of Service (PoC)
Top Password Firefox Password Recovery 2.8 - Denial of Service PoC Exploit Title: Top Password Firefox Password Recovery 2.8 - Denial of Service PoC Date: 2020-01-12 Exploit Author: Antonio de la Piedra Vendor Homepage: https://www.top-password.com/ Software Link:...
Top Password Software Dialup Password Recovery 1.30 - Denial of Service (PoC)
Exploit Title: Top Password Software Dialup Password Recovery 1.30 - Denial of Service PoC Date: 2020-01-12 Exploit Author: Antonio de la Piedra Vendor Homepage: https://www.top-password.com/ Software Link: https://www.top-password.com/download/DialupPRSetup.exe Version: 1.30 Tested on: Windows 7...
Top Password Software Dialup Password Recovery 1.30 Denial Of Service
Exploit Title: Top Password Software Dialup Password Recovery 1.30 - Denial of Service PoC Date: 2020-01-12 Exploit Author: Antonio de la Piedra Vendor Homepage: https://www.top-password.com/ Software Link: https://www.top-password.com/download/DialupPRSetup.exe Version: 1.30 Tested on: Windows 7...
Top Password Firefox Password Recovery 2.8 Denial Of Service
Exploit Title: Top Password Firefox Password Recovery 2.8 - Denial of Service PoC Date: 2020-01-12 Exploit Author: Antonio de la Piedra Vendor Homepage: https://www.top-password.com/ Software Link: https://www.top-password.com/download/FirefoxPRSetup.exe Version: 2.8 Tested on: Windows 7 SP1 32-b...
top-magazin.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1052606 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Red Hat CloudForms Management Engine Log Information Disclosure Vulnerability
The Red Hat CloudForms Management Engine CFME is a management engine for IaaS Infrastructure as a Service cloud services solutions from Red Hat, Inc. A log information disclosure vulnerability exists in Red Hat CFME version 5, which stems from the program logging RHN account messages in the...
CVE-2019-2221
In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of user interaction requirements due to incorrect handling of top activities in INITIALIZING state. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti...
Xiaomi Mi Box Memory Corruption Vulnerability
Xiaomi Mi Box is a Xiaomi set-top box application. Xiaomi Mi Box suffers from a memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, potentially resulting in a denial of service condition...
The cybercrime ecosystem: attacking blogs
Executive summary The Cybercrime Ecosystem is a series of articles explaining how cybercriminals operate, what drives them, what techniques they use and how we, regular Internet users, are part of that ecosystem. The articles will also cover technical details and up-to-date research on the threat...
openSUSE Security Update : procps (openSUSE-2019-2376)
This update for procps fixes the following issues : procps was updated to 3.3.15. bsc1092100 Following security issues were fixed : - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved...
A View into Top Level Domain (TLD) Abuse
Data science and security research teams in the carrier organization at Akamai process massive volumes of DNS queries every day to detect and track malicious activity. The data is live-streamed from DNS resolvers deployed in diverse service provider networks in every region of the world. Provider...
top-foto.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-999078 Security Researcher MitRauch Helped patch 290 vulnerabilities Received 3 Coordinated Disclosure badges Received 5 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting top-foto.de website and its...
The Air Force Ditches Its Nuclear Command Floppy Disks
A Samsung Galaxy 10 fingerprint goof, a Tor impostor, and more of the week's top security news...
Announcing the Security Researcher Quarterly Leaderboard
Right before Black Hat USA 2019, we announced our new researcher recognition program, and at Black Hat we announced the top researchers from the previous twelve months. Since it’s easier to track your progress with regular updates than with just an annual report, we are excited to...
top-hair-international.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-995753 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting top-hair-international.de...
NewStart CGSL CORE 5.04 / MAIN 5.04 : procps-ng Vulnerability (NS-SA-2019-0184)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has procps-ng packages installed that are affected by a vulnerability: - procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled...
top-cartoes-refeicao.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-994495 Security Researcher Gh05tPT Helped patch 6901 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting top-cartoes-refeicao.pt...
Top Echelon Software: Disable xmlrpc.php file
Summary: xmlrpc.php can be used for portscanning or bruteforce attacks. Better is to hide this file. Steps To Reproduce: 1. Go to https://www.topechelon.com/xmlrpc.php 2. send a post request. POST /xmlrpc.php HTTP/1.1 Host: www.topechelon.com User-Agent: Mozilla/5.0 X11; Linux x8664; rv:60.0...
Top Echelon Software: able to login into login.topechelon.com
The support login for our administrative account was using insecure credentials, allowing access to our administrative account. These credentials are not used, so we chose to deactivate the login to prevent access...