Paramiko 2.4.1 - Authentication Bypass

Exploit Title: Paramiko 2.4.1 - Authentication Bypass Date: 2018-10-27 Exploit Author: Adam Brown Vendor Homepage: https://www.paramiko.org Software Link: https://github.com/paramiko/paramiko/tree/v1.15.2 Version: 1.17.6, 1.18.x 1.18.5, 2.0.x 2.0.8, 2.1.x 2.1.5, 2.2.x 2.2.3, 2.3.x 2.3.2, and 2.4....

Unbreakable Enterprise kernel security update

2.6.39-400.298.6 - perf/hwbp: Simplify the perf-hwbp code, fix documentation Linus Torvalds Orabug: 27947612 CVE-2018-100199 2.6.39-400.298.5 - xen-netfront: fix rx stall when reqprodpvt goes back to more than zero again Dongli Zhang Orabug: 25053376 - x86/IBRS: Remove support for IBRSENABLEDUSER...

DLink DIR-601 - Admin Password Disclosure

Exploit Title: DLink DIR-601 Unauthenticated Admin password disclosure Google Dork: N/A Date: 12/24/2017 Exploit Author: Kevin Randall Vendor Homepage: https://www.dlink.com Software Link: N/A Version: Firmware: 2.02NA Hardware Version B1 Tested on: Windows 10 + Mozilla Firefox CVE : CVE-2018-570...

icerm.brown.edu XSS vulnerability

Open Bug Bounty ID: OBB-577802 Description| Value ---|--- Affected Website:| icerm.brown.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

library.brown.edu XSS vulnerability

Open Bug Bounty ID: OBB-451909 Description| Value ---|--- Affected Website:| library.brown.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brownfuneraldirectors.com XSS vulnerability

Open Bug Bounty ID: OBB-363770 Description| Value ---|--- Affected Website:| brownfuneraldirectors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

link.moltonbrown.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-355602 Description| Value ---|--- Affected Website:| link.moltonbrown.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

brown-forman.com XSS vulnerability

Open Bug Bounty ID: OBB-300265 Description| Value ---|--- Affected Website:| brown-forman.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ABB VSN300 WiFi Logger Card and VSN300 WiFi Logger Card for React Privilege Gain Vulnerability

The ABB VSN300 WiFi Logger Card and the VSN300 WiFi Logger Card for React are both wireless data logger card products from Asea Brown Boveri ABB, Switzerland. A security vulnerability exists in ABB VSN300 WiFi Logger Card version 1.8.15 and earlier and VSN300 WiFi Logger Card for React version...

ABB VSN300 WiFi Logger Card and VSN300 WiFi Logger Card for React Privilege Access Control Vulnerability

The ABB VSN300 WiFi Logger Card and the VSN300 WiFi Logger Card for React are both wireless data logger card products from Asea Brown Boveri ABB, Switzerland. A security vulnerability exists in the ABB VSN300 WiFi Logger Card and VSN300 WiFi Logger Card for React, which stems from the program...

brown.edu XSS vulnerability

Vulnerable URL: http://www.brown.edu/academics/pre-college/forms/inquiry.php/"'--! Details: Description| Value ---|--- Patched:| Yes, at 09.05.2017 Latest check for patch:| 09.05.2017 05:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5750 VIP website status:...

moltonbrown.co.uk XSS vulnerability

Vulnerable URL: http://www.moltonbrown.co.uk/store/atgsearch/searchResults.jsp?sid=storegb=0243370929=xss'"--!&requestid=81466 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 237001...

Anonymous Hacktivist 'Barrett Brown' Released From Prison

Barrett Brown, a journalist, formerly served as an unofficial spokesman for the hacktivist collective Anonymous, finally walked free from prison on Tuesday morning after serving more than four years behind bars. The Dallas-born investigative journalist was arrested in 2012 from his home while he...

helpyourself.brownpapertickets.com XSS vulnerability

Vulnerable URL: http://helpyourself.brownpapertickets.com/browse.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

crapemyrtletour.brownpapertickets.com XSS vulnerability

Vulnerable URL: http://crapemyrtletour.brownpapertickets.com/browse.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

brownco.k12.in.us XSS vulnerability

Open Bug Bounty ID: OBB-161624 Description| Value ---|--- Affected Website:| brownco.k12.in.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brown.edu XSS vulnerability

Vulnerable URL: http://www.brown.edu/Facilities/FacilitiesManagement/m/index.php?catabbr=ADMIN=MADDOCK%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:20 GMT Vulnerability type:| XSS Vulnerability...

My Charlie Brown Xmas Tree - Base64 encoded String, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application My Charlie Brown Xmas Tree published at the 'play' market has multiple vulnerabilities...

ccmbweb.ccv.brown.edu XSS vulnerability

Open Bug Bounty ID: OBB-135283 Description| Value ---|--- Affected Website:| ccmbweb.ccv.brown.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brown.edu XSS vulnerability

Vulnerable URL: https://brown.edu/Facilities/FacilitiesManagement/standards/facdesignarchivenew.php?file= Details: Description| Value ---|--- Patched:| Yes, at 12.04.2016 Latest check for patch:| 12.04.2016 10:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...