EUVD-2020-30268

Malware in sbrugna...

CVE-2020-9449

An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS client, and BlaB! WS Pro client version 19.11 allows an attacker with a guest or user session cookie to escalate privileges by retrieving the cookie salt value and creating a valid session cookie for an arbitra...

WPAxFuzz - A Full-Featured Open-Source Wi-Fi Fuzzer

This tool is capable of fuzzing either any management, control or data frame of the 802.11 protocol or the SAE exchange. For the management, control or data frames, you can choose either the "standard" mode where all of the frames transmitted have valid size values or the "random" mode where the...

CVE-2020-9449

An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS client, and BlaB! WS Pro client version 19.11 allows an attacker with a guest or user session cookie to escalate privileges by retrieving the cookie salt value and creating a valid session cookie for an arbitra...

Design/Logic Flaw

An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS client, and BlaB! WS Pro client version 19.11 allows an attacker with a guest or user session cookie to escalate privileges by retrieving the cookie salt value and creating a valid session cookie for an arbitra...

CVE-2020-9449

CVE-2020-9449 affects BlaB! AX/AX Pro and BlaB! WS clients (version 19.11) due to insecure RNG. An attacker with a guest or user session cookie can retrieve the cookie salt value and craft a valid session cookie to escalate privileges to other users or admin. Root cause: weak/random generation in...

CVE-2020-9449

An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS client, and BlaB! WS Pro client version 19.11 allows an attacker with a guest or user session cookie to escalate privileges by retrieving the cookie salt value and creating a valid session cookie for an arbitra...

BlaB! Lite <= 0.5 - Remote File Inclusion Vulnerability

No description provided by source...

BlaB! Lite 3 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: BlaB! Lite 3 CSRF Author: Jonturk75 Vendor or Software Link: http://gscripts.net/free-php-scripts/ChatScripts/BlaB!Lite3/details.html Category:: webapps Demo : http://justblab.com/b5/admin.php? Greetz: Inj3ct0r Exploit DataBase...

BlaB! Lite remote file include vulnerability-vulnerability warning-the black bar safety net

Remote file inclusion vulnerability, you can get a website webshell Official address: Download:http://hot-things.net/cs/dndnormal/blab50lite.zip Vulnerability file: blab50lite/register.php Trojan: a http://localhost/blab50lite/register.php?skindir=shell.txt POC: the...

BlaB! Lite 0.5 Remote File Inclusion

'/ -.- ----------------------oOO------OOo---------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o | ----------------------------------------------------------- | Remote File Inclusion Vulnerability |...

BlaB! Lite 0.5 - Remote File Inclusion

BlaB! Lite 0.5 - Remote File Inclusion '/ -.- ----------------------oOO------OOo---------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o | ----------------------------------------------------------- |...

BlaB! Lite <= 0.5 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ====================================================== BlaB! Lite == 0.5 Remote File Inclusion Vulnerability ====================================================== + Script : Chat Scripts » BlaB! Lite: +...

BlaB! Lite 0.5 - Remote File Inclusion

'/ -.- ----------------------oOO------OOo---------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o | ----------------------------------------------------------- | Remote File Inclusion Vulnerability |...

blabchat-xss.txt

+==================================================================+ + BlaB! Chat 3.3 XSS Multiple Remote Vulnerabilities + +==================================================================+ Authors: Ivan Sanchez & Maximiliano Soler Product: BlaB! Chat Web: http://hot-things.net/ Versions: 3.3...