The vulnerability of the Task Manager service of the AmosConnect email delivery management system allows a perpetrator to execute arbitrary commands on the operating system’s host platform.

The vulnerability of the AmosConnect email delivery system management service is related to the use of immutable, pre-installed system accounts. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full administrative privileges and execute arbitrary commands on the...

Hardcoded credentials

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

CVE-2017-3222

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

CVE-2017-3222

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

CVE-2017-3222

CVE-2017-3222 relates to AmosConnect 8, where hard-coded credentials allow remote attackers to gain full administrative privileges and execute commands with SYSTEM privileges on the Windows host via AmosConnect Task Manager. The surrounding docs note an accompanying backdoor account and that Amos...

CVE-2017-3222: Use of Hard-coded Credentials

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

PT-2017-2834

Name of the Vulnerable Software and Affected Versions AmosConnect version 8 Description The issue is related to hard-coded credentials in the AmosConnect Task Manager, allowing remote attackers to gain full administrative privileges. This includes the ability to execute commands on the Microsoft...

Task Manager Pro <= 1.3.1 - Authenticated Cross-Site Scripting (XSS)

Multiple authenticated XSS vulnerabilities found logged as a low privileged user. Authenticated Stored XSS: Logged as a follower, the lowest privileged user. Write the payload in the 'Add a comment' section Authenticated Reflected XSS On task-edit, task-details, project-details pages:...

WordPress Task Manager Pro 1.31 Cross Site Scripting

Exploit Title: WordPress Task Manager Pro 1.31 - Multiple vulnerabilities Date: 2017-07-11 Exploit Author: 8bitsec Vendor Homepage: https://www.w3bd.com/ Software Link: http://codecanyon.net/item/task-manager-pro-all-in-one-project-based-task-management-plugin-for-wordrpress/19864872 Version: 1.3...

WordPress Task Manager Pro <= 1.3.1 - Authenticated SQL Injection

Blind SQL Injection on task-details page task parameter. Logged as a follower: https://localhost/wp/wp-admin/admin.php?page=task-details&task=6+and+sleep1+and+1%3D1...

WordPress Task Manager Pro <= 1.3.1 - Authenticated SQL Injection

Blind SQL Injection on task-details page task parameter. PoC Logged as a follower: https://localhost/wp/wp-admin/admin.php?page=task-details=6+and+sleep1+and+1%3D1...

Task Manager Pro <= 1.3.1 - Authenticated Cross-Site Scripting (XSS)

Multiple authenticated XSS vulnerabilities found logged as a low privileged user. PoC Authenticated Stored XSS: Logged as a follower, the lowest privileged user. Write the payload in the 'Add a comment' section Authenticated Reflected XSS On task-edit, task-details, project-details pages:...

WordPress Task Manager Pro plugin <=1.3.1 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability found in WordPress Task Manager Pro premium plugin version 1.3.1 and earlier versions by 8bitsec. Solution 2017.07.29 - We were unable to find information about patched release of WordPress Task Manager Pro plugin. The last record on the changelog of the...

WordPress Task Manager Pro plugin <=1.3.1 - Multiple Authenticated Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Cross-Site Scripting XSS vulnerabilities found in WordPress Task Manager Pro premium plugin version 1.3.1 and earlier versions by 8bitsec. Solution 2017.07.29 - We were unable to find information about patched release of WordPress Task Manager Pro plugin. The last record on...

Advanced Desktop Locker 6.0.0 - Lock Screen Bypass Vulnerability

Exploit for windows platform in category local exploits Exploit Title : Advanced Desktop Locker Locker Bypass Date: 8 - 1 - 2017 Software Link: http://www.encrypt4all.com/products/advanced-desktop-locker-information.php Sofrware Version : 6.0.0 Exploit Author: Squnity | Sir.matrix Contact:...

Advanced Desktop Locker 6.0.0 Bypass

Exploit Title : Advanced Desktop Locker Locker Bypass Date: 8 - 1 - 2017 Software Link: http://www.encrypt4all.com/products/advanced-desktop-locker-information.php Sofrware Version : 6.0.0 Exploit Author: Squnity | Sir.matrix Contact: [email protected] Website: https://www.squnity.com Category...

Advanced Desktop Locker 6.0.0 - Lock Screen Bypass

Advanced Desktop Locker 6.0.0 - Lock Screen Bypass Exploit Title : Advanced Desktop Locker Locker Bypass Date: 8 - 1 - 2017 Software Link: http://www.encrypt4all.com/products/advanced-desktop-locker-information.php Sofrware Version : 6.0.0 Exploit Author: Squnity | Sir.matrix Contact:...

Advanced Desktop Locker 6.0.0 - Lock Screen Bypass

Exploit Title : Advanced Desktop Locker Locker Bypass Date: 8 - 1 - 2017 Software Link: http://www.encrypt4all.com/products/advanced-desktop-locker-information.php Sofrware Version : 6.0.0 Exploit Author: Squnity | Sir.matrix Contact: [email protected] Website: https://www.squnity.com Category...

Chrome memory the bug be exploited by hackers: Google has yet to fix-vulnerability warning-the black bar safety net

According to foreign media reports, recently the IT security and protection company Sophos announced that the Chrome browser there is a Bug currently has hackers use. Worse, Google two years ago are aware of this Bug, but until today not yet repaired. ! Chrome memory the bug be exploited by...

Cisco Wireless LAN Controller Denial of Service Vulnerability (CNVD-2016-02517)

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. A denial of service vulnerability in the Bonjour Task Manager for Cisco Wireless LAN Controller WLC Software allows remote attackers ...