Microsoft COM for Windows - Privilege Escalation Exploit

Exploit for windows platform in category local exploits Writeup: https://codewhitesec.blogspot.com/2018/06/cve-2018-0624.html In May 2018 Microsoft patched an interesting vulnerability CVE-2018-0824 which was reported by Nicolas Joly of Microsoft's MSRC: A remote code execution vulnerability exis...

planetwin365.com XSS vulnerability

Open Bug Bounty ID: OBB-633681 Description| Value ---|--- Affected Website:| planetwin365.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

30117.com XSS vulnerability

Open Bug Bounty ID: OBB-633579 Description| Value ---|--- Affected Website:| 30117.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft COM for Windows - Privilege Escalation

Writeup: https://codewhitesec.blogspot.com/2018/06/cve-2018-0624.html In May 2018 Microsoft patched an interesting vulnerability CVE-2018-0824 which was reported by Nicolas Joly of Microsoft's MSRC: A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to...

mirroring360.com XSS vulnerability

Open Bug Bounty ID: OBB-632904 Description| Value ---|--- Affected Website:| mirroring360.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

howtogrowweed420.com XSS vulnerability

Open Bug Bounty ID: OBB-632790 Description| Value ---|--- Affected Website:| howtogrowweed420.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

0594333.com XSS vulnerability

Open Bug Bounty ID: OBB-631780 Description| Value ---|--- Affected Website:| 0594333.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dar118.com XSS vulnerability

Open Bug Bounty ID: OBB-631697 Description| Value ---|--- Affected Website:| dar118.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Windows: Service: WinHTTP Web Proxy Auto-Discovery Service

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winhttpwebproxyautodiscovery.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for WinHTTP Web Proxy Auto-Discovery Service WinHttpAutoProxySvc Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

4000249638.com XSS vulnerability

Open Bug Bounty ID: OBB-630741 Description| Value ---|--- Affected Website:| 4000249638.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

roda2.com XSS vulnerability

Open Bug Bounty ID: OBB-630643 Description| Value ---|--- Affected Website:| roda2.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

support.n26.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-629895 Description| Value ---|--- Affected Website:| support.n26.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

chinalucky8.com XSS vulnerability

Open Bug Bounty ID: OBB-629851 Description| Value ---|--- Affected Website:| chinalucky8.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

富士山.com XSS vulnerability

Open Bug Bounty ID: OBB-629681 Description| Value ---|--- Affected Website:| 富士山.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

shopsexed102.com XSS vulnerability

Open Bug Bounty ID: OBB-628308 Description| Value ---|--- Affected Website:| shopsexed102.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

webmarketing-com.com XSS vulnerability

Open Bug Bounty ID: OBB-627890 Description| Value ---|--- Affected Website:| webmarketing-com.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

how01.com XSS vulnerability

Open Bug Bounty ID: OBB-627569 Description| Value ---|--- Affected Website:| how01.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

007.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-627198 Description| Value ---|--- Affected Website:| 007.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

CVE-2017-16035

The hubl-server module is a wrapper for the HubL Development Server. During installation hubl-server downloads a set of dependencies from api.hubapi.com. It appears in the code that these files are downloaded over HTTPS however the api.hubapi.com endpoint redirects to a HTTP url. Because of this...

how01.com XSS vulnerability

Open Bug Bounty ID: OBB-627063 Description| Value ---|--- Affected Website:| how01.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...