Linux Gather HexChat/XChat Enumeration

This module will collect HexChat and XChat's config files and chat logs from the victim's machine. There are three actions you may choose: CONFIGS, CHATS, and ALL. The CONFIGS option can be used to collect information such as channel settings, channel/server passwords, etc. The CHATS option will...

fuzzdb-collect

Based on the provided code and context, I will analyze the situation and provide a concise summary. Summary: The provided code appears to be a Python script designed to perform...

AgentSmith-HIDS - Open Source Host-based Intrusion Detection System (HIDS)

Technically, AgentSmith-HIDS is not a Host-based Intrusion Detection System HIDS due to lack of rule engine and detection function. However, it can be used as a high performance 'Host Information Collect Agent' as part of your own HIDS solution. The comprehensiveness of information which can be...

How to compile a server status report by using XenCenter

This article describes how to use XenCenter to collect a server status report...

DEBIAN-CVE-2019-19047

A memory leak in the mlx5fwfatalreporterdump function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service memory consumption by triggering mlx5crdumpcollect failures, aka CID-c7ed6d0183d5...

fuzzdb-collect

Based on the provided code and context, it appears to be a Python script designed to perform a brute-force attack on file extensions. The script is part of...

Google Android Remote Code Execution Vulnerability (CNVD-2019-01601)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the 'CollectValuesOrEntriesImpl' function of the elements.cc file in Android. A remote attacker can exploit the vulnerability to...

CVE-2018-9490

In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...

CVE-2018-14500

joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...

CVE-2018-14500

joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...

Google Denies Using Google Arts & Culture App to Collect Selfie Data

By Waqas Google Arts Culture App was recently introduced and its This is a post from HackRead.com Read the original post: Google Denies Using Google Arts Culture App to Collect Selfie Data...

CVE-2018-0108

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to collect customer files via an out-of-band XML External Entity XXE injection. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The...

Feedback Collect - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2017-090

This module enables you to add feedback forms and gather end user feedback, bug reports or any kind of suggestions. The module doesn't sufficiently filter output of its own fields under the scenario of creating or editing feedback-collect content types. This vulnerability is mitigated by the fact...

collect-world.com XSS vulnerability

Open Bug Bounty ID: OBB-448762 Description| Value ---|--- Affected Website:| collect-world.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Ocean CMS \admin\admin_collect.php page type parameter has SQL injection vulnerability

Ocean Movie Management System seacms, Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS \admin\admincollect.php page type parameter SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information and can...

CouchPotato: CIA Hacking Tool to Remotely Spy On Video Streams in Real-Time

After disclosing CIA's strategies to hijack and manipulate webcams and microphones to corrupt or delete recordings, WikiLeaks has now published another Vault 7 leak, revealing CIA's ability to spy on video streams remotely in real-time. Dubbed 'CouchPotato,' document leaked from the CIA details h...

JETCO Pay P2P Collect - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application JETCO Pay P2P Collect published at the 'play' market has multiple vulnerabilities...

SQL injection vulnerability in type parameter of Ocean CMS admin_collect_news.php page

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admincollectnews.php page in the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'type' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about...

SQL Injection Vulnerability in Ocean CMS uesMode Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admincollect.php page in the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'uesMode' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about t...

UBUNTU-CVE-2015-4177

The collectmounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a denial of service system crash by leveraging user-namespace root access for an MNTDETACH umount2 system...