Microsoft people 10.1807.2131.0 - Denial of service Exploit

Exploit for windows platform in category dos / poc Exploit Title: Microsoft people 10.1807.2131.0 - Denial of service PoC Exploit Author : L0RD Contact: email protected Vendor Homepage : https://www.microsoft.com Software link:...

Microsoft People 10.1807.2131.0 - Denial of service (PoC)

Microsoft People 10.1807.2131.0 - Denial of service PoC Exploit Title: Microsoft people 10.1807.2131.0 - Denial of service PoC Exploit Author : L0RD Contact: [email protected] Date: 2018-09-04 Vendor Homepage : https://www.microsoft.com Software link:...

Microsoft People 10.1807.2131.0 Denial Of Service

Exploit Title: Microsoft people 10.1807.2131.0 - Denial of service PoC Exploit Author : L0RD Contact: [email protected] Date: 2018-09-04 Vendor Homepage : https://www.microsoft.com Software link: https://www.microsoft.com/en-us/p/microsoft-people/9nblggh10pg8?activetab=pivot:overviewt...

I'm Doing a Reddit AMA

On Thursday, September 6, starting at 10:00 am CDT, I'll be doing a Reddit "Ask Me Anything" in association with the Ford Foundation. It's about my new book, but -- of course -- you can ask me anything. No promises that I will answer everything...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm giving a book talk on Click Here to Kill Everybody at the Ford Foundation in New York City, on September 5, 2018. The Aspen Institute's Cybersecurity & Technology Program is holding a book launch for Click Here to Kill Everybod...

Vox TG790 ADSL Router - Cross-Site Scripting

Title: Vox TG790 ADSL Router - Cross-Site Scripting Author: Cakes Exploit Date: 2018-08-01 Vendor: Vox Telecom Link: https://www.vox.co.za/ Firmware Version: 6.2.W.1 CVE: N/A Description Due to improper user iunput management low privilege users are able to create a persistent Cross-Site scriptin...

Vox TG790 ADSL Router - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Title: Vox TG790 ADSL Router - Cross-Site Scripting Author: Cakes Vendor: Vox Telecom Link: https://www.vox.co.za/ Firmware Version: 6.2.W.1 CVE: N/A Description Due to improper user iunput management low privilege users are able to creat...

OWA for hackers: ExchangeRelayX

ExchangeRelayX is a PoC tools to demonstrate the ability of an attacker to perform an SMB or HTTP based NTLM relay attack to the EWS endpoint on an on-premise Microsoft Exchange server to compromise the mailbox of the victim. This tool provides the attacker with an OWA looking interface, with...

SQL Injection Vulnerability in Emlsoft

EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in Emlsoft v5.4.5, which stems from a failure to filter item parameters, and can be exploited by attackers to obtain sensitive database information...

radiology-book.com XSS vulnerability

Open Bug Bounty ID: OBB-662414 Description| Value ---|--- Affected Website:| radiology-book.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SQL Injection Vulnerability in EML Enterprise Address Book Management System

EML enterprise customer address book management system, is based on Linux open kernel and Apache based Php + Mysql intelligent B / S interactive service system. EML enterprise address book management system version 5.4.5 there is a sql injection vulnerability , attackers can exploit the...

rejucms cross-site scripting vulnerability

rejucms is an online video web content management system CMS. A cross-site scripting vulnerability exists in rejucms version 2.1. A remote attacker can inject arbitrary web script or HTML by sending the 'content' parameter to the admin/book.php URL...

Three of My Books Are Available in DRM-Free E-Book Format

Humble Bundle sells groups of e-books at ridiculously low prices, DRM free. This month, the bundles are all Wiley titles, including three of my books: Applied Cryptography, Secrets and Lies, and Cryptography Engineering. $15 gets you everything, and they're all DRM-free. Even better, a portion of...

CVE-2018-14838

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

CVE-2018-14686

system/editbook.php in XYCMS 1.7 has stored XSS via a crafted adddo.php request, related to addbook.php...

eml企业通讯录管理系统经典版V5.4.5 sql注入漏洞

...

book-cli (1.2.0) potentially affected by CVE-2017-16152 via static-html-server (0.1.2)

static-html-server NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on static-html-server and may be impacted: - book-cli 1.2.0 Source cves: CVE-2017-16152 Source advisory: OSV:GHSA-9J5M-873F-XH76...

khk.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-648737 Description| Value ---|--- Affected Website:| khk.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Synology CardDAV Server Cross-Site Scripting Vulnerability

Synology CardDAV Server is a Synology application for synchronizing address books, and Address Book Editor is one of the address book editors. A cross-site scripting vulnerability exists in Address Book Editor in Synology CardDAV Server versions prior to 6.0.8-0086. The vulnerability can be...

CVE-2018-8928

Cross-site scripting XSS vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the 1 familyname, 2 givenname, or 3 additionalname parameter...