UBUNTU-CVE-2017-17448

net/netfilter/nfnetlinkcthelper.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnlcthelperlist data structure is shared across all net namespaces...

Arris TG1682G Device Cross-Site Scripting Vulnerability

The Arris TG1682G devices is a Modem modem router all-in-one device from the Arris Group of companies in the U.S.A. The Comcast TG16822.0s7PRODse is a set of firmware developed by Comcast in the U.S.A. that is used in it. A cross-site scripting vulnerability exists in Arris TG1682G devices using...

CVE-2017-16836

Arris TG1682G devices with Comcast TG16822.0s7PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajaxmanagedservices.php service parameter...

CVE-2017-16836

Arris TG1682G devices with Comcast TG16822.0s7PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajaxmanagedservices.php service parameter...

Google to Ditch Public Key Pinning in Chrome

Google said that in an upcoming version of Chrome it will deprecate the browser’s support for HTTP public key pinning. Instead, it will adopt the “safer” more flexible solution of Expect-CT headers. HTTP public key pinning HPKP is a browser security measure that protects against an SSL certificat...

SSL/TLS: HPKP / HSTS / Expect-CT Headers sent via plain HTTP

This script checks if the remote HTTP server is sending a HPKP, HSTS and/or Expect-CT header via plain HTTP. Note: Most major browsers have dropped / deprecated support for this header in 2020. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced...

ct-systemen.nl Open Redirect vulnerability

Vulnerable URL: http://www.ct-systemen.nl/redirect.php?action=url=www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...

ct-n.com XSS vulnerability

Vulnerable URL: http://ct-n.com/CTNplayer.asp?livestream=1/-///'/"//--...

http-security-headers NSE Script

Checks for the HTTP response headers related to security given in OWASP Secure Headers Project and gives a brief description of the header and its configuration value. The script requests the server for the header with http.head and parses it to list headers founds with their configurations. The...

Debian Security Advisory DSA 3840-1 (mysql-connector-java - security update)

Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitrary code. For additional details, please refer to the advisory at https://www.computest.nl/advisories/CT-2017-0425MySQL-Connector-J.txt...

PHP Marketplace Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : PHP Marketplace Script - Multiple SQL Injection Vulnerabilities Author : Yunus YILDIRIM Th3GundY Team : CT-Zer0 @CRYPTTECH - https://www.crypttech.com Website : http://www.yunus.ninja Contact : email protected Vendor Homepage :...

Itech Job Portal Script 9.13 - Multiple Vulnerabilities

Exploit Title : Itech Job Portal Script - Multiple Vulnerabilities Author : Yunus YILDIRIM Th3GundY Team : CT-Zer0 @CRYPTTECH - https://www.crypttech.com Website : http://www.yunus.ninja Contact : [email protected] Vendor Homepage : http://itechscripts.com/ Software Link :...

Itech Multi Vendor Script 6.49 - SQL Injection

Itech Multi Vendor Script 6.49 - SQL Injection Exploit Title : Itech Multi Vendor Script - Multiple SQL Injections Author : Yunus YILDIRIM Th3GundY Team : CT-Zer0 @CRYPTTECH - https://www.crypttech.com Website : http://www.yunus.ninja Contact : [email protected] Vendor Homepage :...

Itech Multi Vendor Script 6.49 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Itech Multi Vendor Script - Multiple SQL Injections Author : Yunus YILDIRIM Th3GundY Team : CT-Zer0 @CRYPTTECH - https://www.crypttech.com Website : http://www.yunus.ninja Contact : email protected Vendor Homepage :...

Itech Multi Vendor Script 6.49 - SQL Injection

Exploit Title : Itech Multi Vendor Script - Multiple SQL Injections Author : Yunus YILDIRIM Th3GundY Team : CT-Zer0 @CRYPTTECH - https://www.crypttech.com Website : http://www.yunus.ninja Contact : [email protected] Vendor Homepage : http://itechscripts.com/ Software Link :...

FTPShell Client 5.24 - PWD Remote Buffer Overflow

FTPShell Client 5.24 - PWD Remote Buffer Overflow -- coding: utf-8 -- Exploit Title: FTPShell Client v5.24 PWD Remote Buffer Overflow Date: 16/11/2016 Author: Yunus YILDIRIM Th3GundY Team: CT-Zer0 @CRYPTTECH - http://www.ct-zer0.com Author Website: http://yildirimyunus.com Contact:...

PCMan FTP Server 2.0.7 LIST Buffer Overflow Exploit

PCMan FTP server version 2.0.7 LIST command buffer overflow exploit. !/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0.7 - 'LIST' Command Buffer Overflow Date: 07/11/2016 Author: Yunus YILDIRIM Th3GundY Team: CT-Zer0 @CRYPTTECH - https://www.crypttech.com Website:...

PCMan FTP Server 2.0.7 HELP Buffer Overflow Exploit

PCMan FTP server version 2.0.7 HELP command buffer overflow exploit. !/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0.7 - 'HELP' Command Buffer Overflow Date: 07/11/2016 Author: Yunus YILDIRIM Th3GundY Team: CT-Zer0 @CRYPTTECH - https://www.crypttech.com Website:...

PCMan FTP Server 2.0.7 LIST Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0.7 - 'LIST' Command Buffer Overflow Date: 07/11/2016 Author: Yunus YILDIRIM Th3GundY Team: CT-Zer0 @CRYPTTECH - https://www.crypttech.com Website: http://yildirimyunus.com Contact: [email protected] Tested on:...

PCMan FTP Server 2.0.7 HELP Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0.7 - 'HELP' Command Buffer Overflow Date: 07/11/2016 Author: Yunus YILDIRIM Th3GundY Team: CT-Zer0 @CRYPTTECH - https://www.crypttech.com Website: http://yildirimyunus.com Contact: [email protected] Tested on:...