7194 matches found
Android Open Source Platform (AOSP) Browser UXSS
This module exploits a Universal Cross-Site Scripting UXSS vulnerability present in all versions of Android's open source stock browser before 4.4, and Android apps running on use auxiliary/gather/android/objecttagwebviewuxss msf undefinedobjecttagwebviewuxss show actions ...actions... msf...
ElfChat 5.2.0 Pro Cross Site Scripting
ElfChat 5.2.0 Pro Reinstall SCript EXploits =========================================== Author : indoushka Vondor : http://elfchat.ru/ Dork: 2011 Elfet - ElfChat 5.2.0 Pro ========================== XSS Reflected - Jquery 1.4.2 $function $'users'.eachfunction var select = $this; var option =...
Google Ups Chrome Rewards, Offers More Money For Exploits
Google is again increasing the amount of money it offers to researchers who report vulnerabilities in Chrome as part of the company’s bug bounty program. Now, researchers will be able to earn $15,000 at the high end of the scale, and Google also is offering more cash for researchers who can submi...
Drozer - The Leading Security Assessment Framework for Android
drozer is a comprehensive security audit and attack framework for Android. With increasing pressure to support mobile working, the ingress of Android into the enterprise is gathering momentum. Have you considered the threat posed by the Android app that supports your business function, or Android...
Apple Patches Shellshock Vulnerability in Bash
Apple tonight released its patch for the Bash vulnerability, updating OS X Lion, Mountain Lion and Mavericks. Late Friday, Apple reassured Mac OS X users that most were protected by default, but nonetheless that it was working on a patch. The vulnerability in Bash, which stands for Bourne Again...
CVE-2014-6277
creationtimestamp| type| source ---|---|--- 2014-09-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36933 2014-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35081 2023-12-18 04:29:01+00:00| seen| https://t.me/arpsyndicate/1911 2023-12-18 06:11:35+00:00|...
Oracle Linux 5 / 6 / 7 : bash (ELSA-2014-1306)
The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1306 advisory. - CVE-2014-7169 Resolves: 1146324 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
Bash Vulnerability Exploits Dropping DDoS Bots
A honeypot run by researchers at AlienVault Labs has snared two separate pieces of malware attempting to exploit the Bash vulnerability. One sample is a repurposed IRC bot written in Perl that is trying to build a botnet to be used in distributed denial of service attacks DDoS, said Jaime Blasco,...
CVE-2014-3659
creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34765 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34766 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34777 2014-10-01...
CVE-2014-62771
creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34777 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34765 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34766 2014-10-01...
Mandriva Linux Security Advisory : bash (MDVSA-2014:186)
A flaw was found in the way Bash evaluated certain specially crafted environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment...
The latest bash vulnerability solution-exploits warning-the black bar safety net
Is today just broke the Bash security vulnerability, and SSH bash emergency security patches is very important. Test whether the presence of the vulnerability you Please execute the following command: root@keepalivenginxmaster / env x=' :;; echo vulnerable" bash-c "echo this is a test" 1 2 3 4 5 ...
CVE-2014-7910
creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34765 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34766 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34777 2014-10-01...
CVE-2014-3671
creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34765 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34766 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34777 2014-10-01...
Bash Environment Variables Code Injection Exploit
Exploit for linux platform in category remote exploits...
SUSE-RU-2015:0621-1 Security update for Linux kernel
The SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix various bugs and security issues. The following security bugs have been fixed: CVE-2014-1739: The mediadeviceenumentities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a...
Apple TV < 7 Multiple Vulnerabilities
According to its banner, the remote Apple TV device is a version prior to 7. It is, therefore, affected by multiple vulnerabilities, the most serious of which can result in arbitrary code execution. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid77822;...
Immunity Canvas: ESET_EPFWNDIS
Name| ESETEpFwNDIS ---|--- CVE| CVE-2014-4973 Exploit Pack| CANVAS Description| EpFwNDIS.sys Trusted Value Vulnerability Notes| Repeatability: Infinite Notes: This module exploits a vulnerability on the ESET Personal Firewall NDIS filter EpFwNdis.sys driver. The Firewall Module Build 1183 2014021...
How to Detect SQL Injection Attacks
SQL Injection SQLi attacks have been around for over a decade. You might wonder why they are still so prevalent. The main reason is that they still work on quite a few web application targets. In fact, according to Veracode’s 2014 State of Security Software Report , SQL injection vulnerabilities...
