CVE-2015-8968

git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone...

Command injection

git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone...

CVE-2015-8968

CVE-2015-8968 affects git-fastclone prior to 1.0.1, enabling arbitrary shell command execution via .gitmodules when cloning recursively or updating submodules. The exploit occurs through ext helper URLs (git-remote-ext) embedded in submodules, allowing command execution either over cloned repos o...

CVE-2015-8968

git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone...

kernel: Information leak when truncating of compressed/inlined extents on BTRFS

An information-leak vulnerability was found in the kernel when it truncated a file to a smaller size which consisted of an inline extent that was compressed. The data between the new file size and the old file size was not discarded and the number of bytes used by the inode were not correctly...

kernel: Information leak when truncating of compressed/inlined extents on BTRFS

An information-leak vulnerability was found in the kernel when it truncated a file to a smaller size which consisted of an inline extent that was compressed. The data between the new file size and the old file size was not discarded and the number of bytes used by the inode were not correctly...

The vulnerability of the Linux operating system, which allows a hacker to send signals to privileged processes

The vulnerability of the Linux operating system’s system call clone kernel function is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating locally, to send signals to privileged parent processes from unprivileged child processes by creating a new...

Just Dial Clone Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: SQL Injection in Just Dial Clone Script Date: 20 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: http://www.i-netsolution.com/...

Just Dial Clone Script SQL Injection

Exploit Title: SQL Injection in Just Dial Clone Script Date: 20 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: http://www.i-netsolution.com/ ---------------------------------------------------------------------------------------------------------------------- Proof of...

Just Dial Clone Script - 'srch' SQL Injection

Exploit Title: SQL Injection in Just Dial Clone Script Date: 20 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: http://www.i-netsolution.com/ ---------------------------------------------------------------------------------------------------------------------- Proof of...

Just Dial Clone Script - srch SQL Injection

Just Dial Clone Script - srch SQL Injection Exploit Title: SQL Injection in Just Dial Clone Script Date: 20 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: http://www.i-netsolution.com/...

B2B Portal Script - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor :...

Just Dial Clone Script - SQL Injection Vulnerability

Exploit for php platform in category web applications x========================================================================================================================================x | Title : Just Dial Clone Script SQL & XSS Vulnerabilities | Software : Just Dial Clone | Vendor :...

B2B Portal Script - Blind SQL Injection

x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor : http://www.i-netsolution.com/ | Demo :...

Just Dial Clone Script SQL Injection

x========================================================================================================================================x | Title : Just Dial Clone Script SQL & XSS Vulnerabilities | Software : Just Dial Clone | Vendor : http://www.i-netsolution.com/ | Demo :...

B2B Portal Script - Blind SQL Injection

B2B Portal Script - Blind SQL Injection x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor :...

B2B Portal Script Blind SQL Injection

x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor : http://www.i-netsolution.com/ | Demo :...

Just Dial Clone Script - 'fid' SQL Injection

x========================================================================================================================================x | Title : Just Dial Clone Script SQL & XSS Vulnerabilities | Software : Just Dial Clone | Vendor : http://www.i-netsolution.com/ | Demo :...

MITM BLE Security Assessment: gattacker

MITM BLE Security Assessment A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more The tool creates exact copy of attacked device in Bluetooth layer, and then tricks mobile application to interpret its broadcasts and connect to it instead the original device. At the same time, i...

chromium-browser: Same origin bypass for images in Blink

Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code...