PRET

The repository michaelxiaxc/PRET is a Printer Exploitation Toolkit that allows users to test the security of their printers. The tool connects to a device via network or USB and exploits the features of a given printer language, currently supporting PostScript, PJL, and PCL. The main idea of PRET...

Google Chrome V8 Engine Memory Corruption(CVE-2017-5088)

A vulnerability exists in google chrome x59.0.3071.104. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

NGINX NJS Heap-Based Buffer Overflow (CVE-2019-12207)

A heap-based buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Gracemedia Media Player Local File Inclusion (CVE-2019-9618)

A vulnerability exists in gracemedia media player project gracemedia media player. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Null Pointer (APSB20-24: CVE-2020-9610)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Digital Signature Bypass (APSB20-24: CVE-2020-9596)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Beyond Zoom: How Safe Are Slack and Other Collaboration Apps?

As the coronavirus pandemic continues to worsen, remote-collaboration platforms – now fixtures in many workers’ “new normal” – are facing more scrutiny. Popular video-conferencing app Zoom may currently be in the cybersecurity hot seat, but other collaboration tools, such as Slack, Trello, WebEx...

Myucms 2.2.4 suffers from arbitrary file deletion vulnerability (CNVD-2020-27933)

MyuCMS open source content management system developed using ThinkPHP community mall aggregation, plug-ins, templates, lightweight and fast easy to expand. Myucms 2.2.4 version of the arbitrary file deletion vulnerability exists . Attackers can use the vulnerability to damage and reload the syste...

Adobe Acrobat and Reader Insecure Library Loading (APSB20-13: CVE-2020-3803)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Memory address leak (APSB20-13: CVE-2020-3800)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Ransomware Maze

ARCHIVED STORY Ransomware Maze Alexandre Mundo · MAR 26, 2020 Overview The Maze ransomware, previously known in the community as “ChaCha ransomware”, was discovered on May the 29th 2019 by Jerome Segura1. The main goal of the ransomware is to crypt all files that it can in an infected system and...

Google Chrome memory misreference vulnerability (CNVD-2020-19205)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A memory misreference vulnerability exists in audio in versions prior to Google Chrome 80.0.3987.149. A remote attacker can exploit this vulnerability to leverage...

Google Chrome memory misreference vulnerability (CNVD-2020-19208)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A memory misreference vulnerability exists in audio in versions prior to Google Chrome 80.0.3987.149. A remote attacker can exploit this vulnerability to leverage...

Google Chrome memory misreference vulnerability (CNVD-2020-19204)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A memory misreference vulnerability exists in audio in versions prior to Google Chrome 80.0.3987.149. A remote attacker can exploit this vulnerability to leverage...

Google Chrome Memory Misreference Vulnerability (CNVD-2020-19199)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A memory misreference vulnerability exists in audio in versions prior to Google Chrome 80.0.3987.149. A remote attacker can exploit this vulnerability to leverage...

Google Chrome memory misreference vulnerability (CNVD-2020-19198)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A memory misreference vulnerability exists in audio in versions prior to Google Chrome 80.0.3987.149. A remote attacker can exploit this vulnerability to leverage...

FreeBSD : Okular -- Local binary execution via action links (c3600a64-64ea-11ea-bdff-e0d55e2a8bf9)

Albert Astals Cid : Okular can be tricked into executing local binaries via specially crafted PDF files. This binary execution can require almost no user interaction. No parameters can be passed to those local binaries. We have not been able to identify any binary that will cause actual damage, b...

Nord Security: Account deletion requests not entirely honoured. Misinformation even after seeking clarification from customer support.

Summary: Requesting account deletion from NordVPN customer support that is supposed to have "removed your account from our database." does not truly remove account from database. Even after asking if critical information such a billing information is removed, which customer support confirms...

Identifying Let’s Encrypt Revoked Certificates

Let's Encrypt is a free, automated, open certificate authority CA run for the public's benefit as a service from the Internet Security Research Group ISRG. It provides free digital certificates to enable HTTPS SSL/TLS for websites via user-friendly means. Earlier this week, Let's Encrypt announce...

Arbitrary File Deletion Vulnerability in oyplus-cms

oyplus-cms Yue video is a PHP and MySQL based open source video background management system . The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . There is an arbitrary file deletion vulnerability ...