Internet Bug Bounty: Null Pointer Dereference in PHP Session Upload Progress

Affected Versions ------------ Affected is all of PHP5.4/5.5/5.6 Affected is all of PHP7 Credits ------------ This vulnerability was disclosed by Taoguang Chen. Description ------------ session.c static int phpsessionrfc1867callbackunsigned int event, void eventdata, void extra / / ... switcheven...

Vulnerability Spotlight: Memory corruption, DoS vulnerabilities in CoTURN

Aleksandar Nikolic of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. CoTURN contains denial-of-service and memory corruption vulnerabilities in the way its web server parses POST requests. CoTURN is a TURN server implementation that can be used as a general- purpose network traff...

CoTURN HTTP Server POST-parsing information leak vulnerability

Summary An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. An attacker needs to send an HTTPS request to trigger this vulnerability. Teste...

CoTURN HTTP Server POST-parsing denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to server crash and denial of service. An attacker needs to send an HTTP request to trigger this vulnerability. Tested Versions...

Easy File Sharing Web Server 7.2 Buffer Overflow

!/usr/bin/python Exploit Title: Easy File Sharing Web Server v7.2 - POST 'Email' Unauthenticated Remote Buffer Overflow Exploit Author: boku aka Bobby Cooke Date: February 7th, 2020 Vendor Homepage: http://www.sharing-file.com/ Software Link: http://www.sharing-file.com/efssetup.exe Version: 7.2...

Siemens SCALANCE S-600 Firewall WEB Server Denial of Service Vulnerability

The Siemens SCALANCE S-600 Firewall is an industrial firewall device. A security vulnerability exists on port 443 of the Siemens SCALANCE S-600 Firewall WEB server, which allows remote attackers to exploit the vulnerability by submitting a special request, which can be used for denial-of-service...

PT-2020-6877 · Abb · Abb Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 4.0 through 6.0.2 Description: The issue is related to the absence of the X-XSS-Protection HTTP response header in responses from the web server. This might increase the risk of Cross Site Scripting XSS attacks, particularl...

Easy File Management Web Server 5.6 Unquoted Service Path

Exploit Title: Easy File Management Web Server v5.6 - 'Easy File Management Web Service' Unquoted Service Path Exploit Author: boku Date: 02/10/2020 Vendor Homepage: http://www.sharing-file.com/ Software Link: http://www.web-file-management.com/efmsetup.exe Version: 5.6 Tested On: Windows 10 32-b...

Easy File Sharing Web Server 7.2 Unquoted Service Path

Exploit Title: Easy File Sharing Web Server v7.2 - 'Easy File Sharing Web Service' Unquoted Service Path Exploit Author: boku Date: 02/10/2020 Vendor Homepage: http://www.sharing-file.com/ Software Link: http://www.sharing-file.com/efssetup.exe Version: 7.2 Tested On: Windows 10 32-bit Recreate: ...

PowerTools

This repository is an offensive tool for PowerShell exploitation. It contains a collection of scripts that utilize a common pattern to host a script on a PowerShell webserver, invoke the IEX download cradle to download/execute the target code and post the results back to the server, and then...

CVE-2019-18791

Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser...

CVE-2019-18791

Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser...

Cross site scripting

Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser...

CVE-2019-18791

The CVE-2019-18791 issue affects Lexmark printer MS812 and older Lexmark devices, due to a stored XSS in the embedded web server. The root cause is insufficient validation of client-side data by the web application, allowing an attacker to expose session credentials and other information via the ...

CVE-2019-18791

Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser...

CVE-2020-7208

LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2...

TIBCO Security Advisory: February 19, 2020 - TIBCOEBX

TIBCO EBX Exposes Cross-Site Scripting Vulnerability Original release date: February19, 2020 Last revised: CVE-2019-17333 Source: TIBCO Software Inc. TIBCO EBX Exposes Cross-Site Scripting Vulnerability Original release date: February 19, 2020 Last revised: --- Source: TIBCO Software Inc. Systems...

CVE-2020-8890

An issue was discovered in MISP before 2.4.121. It mishandled time skew between the machine hosting the web server and the machine hosting the database when trying to block a brute-force series of invalid requests...

CVE-2019-13941

A vulnerability has been identified in OZW672 All versions V10.00, OZW772 All versions V10.00. Vulnerable versions of OZW Web Server use predictable path names for project files that legitimately authenticated users have created by using the application's export function. By accessing a specific...

CVE-2019-13941

A vulnerability has been identified in OZW672 All versions V10.00, OZW772 All versions V10.00. Vulnerable versions of OZW Web Server use predictable path names for project files that legitimately authenticated users have created by using the application's export function. By accessing a specific...