7650 matches found
APT29 Domain Fronting With TOR
Mandiant has observed Russian nation-state attackers APT29 employing domain fronting techniques for stealthy backdoor access to victim environments for at least two years. There has been considerable discussion about domain fronting following the release of a paper detailing these techniques...
[SECURITY] Fedora 25 Update: sane-backends-1.0.25-7.fc25
Scanner Access Now Easy SANE is a universal scanner interface. The SANE application programming interface API provides standardized access to any raster image scanner hardware flatbed scanner, hand-held scanner, video and still cameras, frame-grabbers, etc...
CVE-2017-6510
Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download any file from any folder outside the FTP root Directory...
CVE-2017-6510
Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download any file from any folder outside the FTP root Directory...
CVE-2017-6510
CVE-2017-6510 affects Easy File Sharing FTP Server v3.6 and earlier, exposing a directory traversal flaw that lets an attacker list and download arbitrary files outside the FTP root. The vulnerability is described across multiple sources (NVD entry; CIRCL sighting; CNVD/CVE records; 1337DAY explo...
Easy MOV Converter 1.4.24 Denial Of Service
!/usr/bin/python Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC Date : 12/03/2017 Exploit Author : Muhann4d Vendor Homepage : http://www.divxtodvd.net/ Software Link : http://www.divxtodvd.net/easymovconverter.exe Tested Version : 1.4.24 Category : Denial of Servic...
Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH)
!/usr/bin/python Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC Date : 12/03/2017 Exploit Author : Muhann4d Vendor Homepage : http://www.divxtodvd.net/ Software Link : http://www.divxtodvd.net/easymovconverter.exe Tested Version : 1.4.24 Category : Denial of Servic...
Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH)
Easy MOV Converter 1.4.24 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC Date : 12/03/2017 Exploit Author : Muhann4d Vendor Homepage : http://www.divxtodvd.net/ Software Link : http://www.divxtodvd.net/easymovconverter.e...
Easy File Sharing FTP Server 3.6 Directory Traversal
This module exploits a directory traversal vulnerability found in Easy File Sharing FTP Server Version 3.6 and Earlier. This vulnerability allows an attacker to download arbitrary files from the server by crafting a RETR command that includes file system traversal strings such as '../' Module...
WordPress plugin Easy Table cross-site scripting vulnerability
WordPress is a free and open source blogging software and content management system on the platform of PHP and MySQL.Easy Table is a plugin specially designed for managing tables. A cross-site scripting vulnerability exists in the WordPress plugin Easy Table, where the program fails to filter...
WordPress Easy Table 1.6 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications ============================================= MGC ALERT 2017-001 - Original release date: Feb 07, 2017 - Last revised: Feb 12, 2017 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score...
Easy Table <= 1.6 - Authenticated Stored Cross-Site Scripting (XSS)
The Easy Table WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...
WordPress Easy Table 1.6 Cross Site Scripting
============================================= MGC ALERT 2017-001 - Original release date: Feb 07, 2017 - Last revised: Feb 12, 2017 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score ============================================= I. VULNERABILITY -------------------------...
CVE-2016-9345
An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system...
CVE-2016-9345
An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system...
Design/Logic Flaw
An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system...
CVE-2016-9345
An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system...
CVE-2016-9345
DeltaV Easy Security Management in Emerson DeltaV V12.3, V12.3.1, and V13.3 is affected by CVE-2016-9345 due to improper privilege management, enabling a local attacker to elevate privileges within the DeltaV control system. Exploitation is local with no remote vector; user interaction may be req...
Easy Web Search 3 - 'id' Parameter SQL Injection
No description provided by source. !/usr/bin/python -- coding: utf-8 -- from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re import random import hashlib class TestPOCPOCBase: name = "Easy Web Search 3 - 'id' Parameter SQL Injection"...
Easy Support Tools 1.0 - 'stt' Parameter SQL Injection
No description provided by source. !/usr/bin/python -- coding: utf-8 -- from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re import random import hashlib class TestPOCPOCBase: name = "Easy Support Tools 1.0 - 'stt' Parameter SQL...