Swift Compressor Software suffers from dll hijacking vulnerability

Swift compression software is an efficient and intelligent picture compression, PDF compression, video compression software. Support batch compression, lossless compression, effectively solve the problem of oversized files. Swift Compressor has a dll hijacking vulnerability that can be exploited ...

XSpear v1.3 - Powerfull XSS Scanning And Parameter Analysis Tool

XSpear is XSS Scanner on ruby gems Key features Pattern matching based XSS scanning Detect alert confirm prompt event on headless browser with Selenium Testing request/response for XSS protection bypass and reflectedor all params Reflected Params All paramsfor blind xss, anytings Filtered test...

Design/Logic Flaw

There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...

CVE-2018-12359

A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60,...

Cloud Calendar is vulnerable to dll hijacking

Cloud Calendar is a time management tool developed by Qingdao Softmedia Network Technology Co. A dll hijacking vulnerability exists in the Cloud Calendar client, which can be exploited by attackers to execute arbitrary code...

Oriental Wealth Independent Trading Terminal has dll Hijacking Vulnerability

Oriental Wealth Independent Trading Terminal is a software for securities trading under Oriental Wealth. There is a dll hijacking vulnerability that can be exploited by attackers to execute arbitrary code...

Yuetbook PDF Reader has dll hijacking vulnerability

Yue book PDF reader is a PDF reader developed by Shenzhen Evergreen Technology Co. Yueshu PDF dll hijacking vulnerability, an attacker can exploit the vulnerability to execute arbitrary code...

NewStart CGSL CORE 5.05 / MAIN 5.05 : bind Vulnerability (NS-SA-2019-0232)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has bind packages installed that are affected by a vulnerability: - To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various...

CVE-2019-20072

On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter Dynamic DNS Configuration...

Design/Logic Flaw

On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter DynDns settings of the Dynamic DNS Configuration...

Design/Logic Flaw

On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter Dynamic DNS Configuration...

OpenBSD - Dynamic Loader chpass Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenBSD Dynamic Loader chpass Privilege Escalation', 'Description' = %q This module exploits a vulnerability in the OpenBSD ld.so dynamic loader...

CVE-2019-20072

CVE-2019-20072 corresponds to a cross-site scripting vulnerability in Netis DL4323 devices, exploitable via the hostname parameter in form2Ddns.cgi used for Dynamic DNS configuration. The issue stems from insufficient input validation in the web application, enabling execution of arbitrary client...

CVE-2019-20072

On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter Dynamic DNS Configuration...

CVE-2019-20076

CVE-2019-20076 concerns the Netis DL4323 modem, where a stored/reflected cross-site scripting (XSS) vulnerability exists in the DynDns settings page due to the username parameter in form2Ddns.cgi. The issue stems from insufficient input validation in the WEB application, enabling an attacker to i...

Choice Financial Terminal - PC Version has dll Hijacking Vulnerability

Choice Financial Terminal is a financial data analysis and investment management software. Choice Financial Terminal-PC version has a dll hijacking vulnerability, which can be exploited by attackers to load dll files and execute arbitrary code...

OpenBSD Dynamic Loader chpass Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenBSD Dynamic Loader chpass Privilege Escalation', 'Description' = %q This module exploits a vulnerability in the OpenBSD ld.so dynamic loader...

Dll Hijacking Vulnerability in Express

FlashGet is an old-school download tool. FlashGet has a dll hijacking vulnerability that can be exploited by attackers to load malicious dlls and execute malicious code...

Dll hijacking vulnerability exists in Sokrat

Sokrat a FLV video download software. A dll hijacking vulnerability exists in Sokrat. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Malwinx - Just A Normal Flask Web App To Understand Win32Api With Code Snippets And References

A normal flask web app to learn win32api with code snippets and references. Prerequisite You need to download the following package before starting it pip install flask pip install pefile pip install requests Usage $ python flaskapp.py Live Demo Here is the Walkthrough: 1. Upload the exe or dll. ...