101 matches found
Mozilla Firefox 63.0.1 Denial Of Service
Exploit Title: Mozilla Firefox 63.0.1 - Denial of Service PoC Date: 2018-11-29 Exploit Author: SAIKUMAR CHEBROLU Vendor Homepage: https://www.mozilla.org/en-US/firefox/new/ Bugzilla report: https://bugzilla.mozilla.org/showbug.cgi?id=1504512 Version: Firefox 63.0.1 Tested on: Windows 10 CVE : No...
ipv4Bypass - Using IPv6 To Bypass Security
Using IPv6 to Bypass Security Dependences tested onKali Linux python2.7 nmap python-nmap https://pypi.org/project/python-nmap/ termcolor https://pypi.org/project/termcolor/ Example on how to run the tool $ python bypass.py -i eth0 -r 10.5.192.0/24 $ python bypass.py -h Usage: bypass.py options...
Chrome V8 KeyAccumulator Bug
Chrome: V8: A bug with KeyAccumulator PoC: for let i = 0; i https://cs.chromium.org/chromium/src/v8/src/objects.cc?rcl=a2ca1996873f3ffa79d9495fb2cf4e7c0e51d9e9&l=18369. The new table is directly used as the backing store of the result array of "Reflect.ownKeysarr". 2. The shift method invokes the...
shopify-scripts: Heap Overflow in fiber_switch triggered from Fiber.transfer
It appears as if my recommendations were ignored in the GitHub issue, so I've repeated the issue here. PoC Fiber.new.transfer 0,0,0,0,0,0,0,0,0,0, 0,0,0,0,0,0,0,0,0,0, 0,0,0,0,0,0,0,0,0,0, 0,0,0,0,0,0,0,0,0,0, 0,0,0,0,0,0,0,0,0,0, 0,0,0,0,0,0,0,0,0,0, 0,0,0,0,0 Explanation The cause of this is th...
The Japanese version of the WPS remote code execution vulnerability detailed analysis-vulnerability warning-the black bar safety net
Word processing and work product in the vulnerability is the threat actors to exploit the useful target. Users often encounter in everyday life these software packages use the file type, and may in the email to open such a file, or be prompted to download from the website this file does not produ...
Facebook Bug Declares Millions of Users Dead, Including Zuckerberg!
Last night, Facebook declared everyone dead, including the company's CEO Mark Zuckerberg, in a massive memorial 'remembering' profile glitch. Well, that's awkward. Despite being very much alive, Facebook users, when logged on to their accounts on Friday afternoon, found their accounts turned to a...
Flippy My Life Stories 2.0 XSS Vulnerability
Flippy My Life Stories 2.0 is a CMS allowing to create a everyday story website. Usage Info 1: Go to http://website.fr/register.html 2: In "nickname" type Javascript code like alert2 3: Go to http://website.fr/userlogin.html and Log in 4: Click on "My Stories", it will lead you on the vulnerable...
Ceragon FiberAir IP-10 Microwave Bridge contains a default root password
Overview Ceragon FiberAir IP-10 Microwave Bridge contains a default root password. Description CWE-255:Credentials Management Ceragon FiberAir IP-10 Microwave Bridges contain a default root password. The root account can be accessed through ssh, telnet, command line interface, or via HTTP. The...
National Security Letters Challenged in Ninth Circuit Court
In the Ninth Circuit Court in San Francisco Wednesday morning, the Electronic Frontier Foundation’s EFF Kurt Opsahl urged the federal appeals court to uphold a lower court’s ruling that national security letters NSLs are unconstitutional. Regardless whether the ruling is upheld, the matter of NSL...
AlstraSoft E-Friends <= 4.21 Admin Session Retrieve Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo AlstraSoft E-Friends = 4.21 Admin Session Retrieve Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love ; if $argc2 echo Usage: php .$argv0...
RunCMS 1.6.1 - (pm.class.php) Multiple SQL Injection Vulnerabilities
Exploit for php platform in category web applications source: http://www.securityfocus.com/bid/29069/info RunCMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
JIRA Issues Collector Directory Traversal
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'JIRA Issues Collector Directory Traversal', 'Description' = %q This module exploits a directory traversal flaw in JIRA 6.0.3. The...
Flaw in Intel Ethernet controller exposes to 'packet of death' attack
The hardware qualification is a very important issue, recent vulnerabilities discovered in network appliances of various manufacturer have alerted security community once again on the necessity to validate the hardware especially for large consume product. The last news is related to a...
DocuWiki 2012/01/25 Cross Site Request Forgery / Cross Site Scripting
DokuWiki Ver.2012/01/25 Latest Version CSRF Add User Exploit Discovered by : Khashayar Fereidani Team Website : HTTP://IRCRASH.COM IRCRASH Security Community Facebook : http://facebook.com/fereidani Twitter : https://twitter.com/!/IRCRASH Facebook Page :...
Joomla Resman Cross Site Scripting
Joomla comresman XSS Vulnerability Author : SOLVER Bug Researchers Date : 13.06.2011 Name : Joomla comresman Bug Type : XSS Cross Site Scripting Infection : Hedef sistem uzerinde zararli Javascript kodlari calistirilabilir. Explanation : Joomla comresman eklentisini kullanan sitelerde gorulen bir...
DNS Spoofing - Man in the Middle (Basic Attack)
Document Title: =============== DNS Spoofing - Man in the Middle Basic Attack References: =========== Download: http://www.vulnerability-lab.com/resources/videos/16.wmv View: http://www.youtube.com/watch?v=9HWvUgSk0Y Release Date: ============= 2011-06-12 Vulnerability Laboratory ID VL-ID:...
Real Estate Investor Websites (testimonials.php) File Upload
Exploit for php platform in category web applications لا اله إلآ الله Ù…Øمد رسول الله No god but Allah, Mohammad is the Messenger of Allah Real Estate Investor sites testimonials.php File Upload Vulnerability » Author : Al-Ghamdi » Email : email protected » : Saudi Arabi...
BMForum Myna 6.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Author: Stephan Sattler Software Website: http://www.bmforum.com/ Software Link: http://www.bmforum.com/down/ Required: magic quotes = Off Vulnerability /add-on/jsviewnew.php line 20++: $length = $GET'length'; $forumid = $GET'forumid'; $num =...
HelixPlayer removal
1.0.6-3.1 - Empty package, and add uninstall subpackage with explanation for the emptiness. Related: bz662779...
Empire cms backstage to get a shell vulnerability and fix-vulnerability warning-the black bar safety net
The first method: add a custom page 6.0 on experiment success Template management - add custom page - page name casually--file name: xx. asp;. html--the page content--pony copy the contents into it Save the post and then the Admin page Click you can go see your horse, generally in the root...