Anonymous SQL Execution in Oracle Advanced Support

A little over a year ago I was performing a penetration test on a client's external environment. One crucial step in any external penetration test is mapping out accessible web servers. The combination of nmap with EyeWitness make this step rather quick as we can perform port scanning for web...

Vulnerability of Microsoft Office software, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerabilities of the Microsoft Office Compatibility Pack, Office Online Server, Microsoft Office Web Apps, Word Viewer and Microsoft Excel Web App, SharePoint applications, Microsoft Word text editor, and Word Automation Services are related to improper handling of objects in memory...

CVE-2014-0029

Multiple cross-site scripting XSS vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

DenyAll Web Application Firewall Remote Code Execution (CVE-2017-14706)

An authentication bypass and code injection vulnerability has been reported in DenyAll Web Application Firewall. The vulnerability is due to an information disclosure and the way that DenyAll Web Application Firewall validates session IDs while authenticating users. Remote attackers can execute a...

Rockstar Games: Leak IP internal

The researcher found an old marketing web application for one of our previous titles that was not properly decommissioned. As a result, an internal IP address and a set of DB credentials were being exposed. Fortunately, the database in question had already been decommissioned so the credentials...

Trend Micro Mobile Security for Enterprise upload_web_app AppFile SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Mobile Security for Enterprise. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of the uploadwebapp action. When parsing the 'ur...

FoodStar 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications...

Microsoft Office Web Apps 2013 Service Pack 1 Multiple Vulnerabilities (KB3213562)

This host is missing an important security update according to Microsoft KB3213562 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Lessons from the Equifax Breach

When we see a car wreck it’s very easy to slow down and gawk. The first thing we think is “Wow, that’s awful,” quickly followed by “Whew… glad that wasn’t me,” and then we drive on. Most of us don’t spend time thinking about how the wreck happened -- we were just glad it wasn’t us. A similar...

Exploit for Buffer Underflow in Microsoft

github 军火库 web，安全，渗透，军火库 漏洞及渗透练习平台： WebGoat漏洞练习环境 https://github.com/WebGoat/WebGoat https://github.com/WebGoat/WebGoat-Legacy Damn Vulnerable Web Application漏洞练习平台 https://github.com/RandomStorm/DVWA 数据库注入练习平台 https://github.com/Audi-1/sqli-labs 用node编写的漏洞练习平台，like OWASP Node Goat...

[SECURITY] Fedora 26 Update: bodhi-2.9.1-1.fc26

Bodhi is a web application that facilitates the process of publishing updates for a software distribution. A modular piece of the Fedora Infrastructure stack Utilizes the Koji Buildsystem for tracking RPMs Creates the update repositories using Mash, which composes a repository b ased on tagged...

Stored Cross-Site Scripting Vulnerability in Tea Bugs App

The Tea Bug app is a and a mobile software specially created for those who love tea culture. Tea Bug app has a stored cross-site scripting vulnerability. Allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

Microsoft Exchange Server End of Life (EOL) Detection

The Microsoft Exchange Server version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

[SECURITY] Fedora 26 Update: bodhi-2.6.2-1.fc26

Bodhi is a web application that facilitates the process of publishing updates for a software distribution. A modular piece of the Fedora Infrastructure stack Utilizes the Koji Buildsystem for tracking RPMs Creates the update repositories using Mash, which composes a repository b ased on tagged...

Description of the security update for Project Server 2013: May 9, 2017

Description of the security update for Project Server 2013: May 9, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Joomla com_tag plugin 'tag' parameter SQL injection vulnerability

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla comtag, which allows remote attackers to inject malicious sql commands via the vulnerable 'tag' parameter to compromise a web application or dbms...

GitLab: CSRF-Token leak by request forgery

Hi, I found the following issue in my own Gitlab installation. This is a request forgery that reveals the Rails authenticitytoken remotely, which in turn allows mounting state-changing CSRF attacks. Vulnerability The web app code relies on location.pathname in a number of places to create new...

Microsoft Excel Web App Elevation of Privilege Vulnerability (KB3101522)

This host is missing an important security update according to Microsoft security update KB3101522 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

PT-2017-9761 · Moxa · Moxa Awk-3131A Wireless Access Point

Name of the Vulnerable Software and Affected Versions: Moxa AWK-3131A Wireless Access Point version 1.1 Description: A reflected Cross-Site Scripting issue exists in the Web Application functionality. Specially crafted input in multiple parameters can cause malicious scripts to be executed by a...

Description of the security update for SharePoint Server 2010 Excel Web App: April 11, 2017

Description of the security update for SharePoint Server 2010 Excel Web App: April 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities,...