Smart Locks Bricked by Bad Update

A botched wireless update for a remotely accessible smart lock system has bricked hundreds of them. The locks suffered a “fatal error,” according to device’s manufacturer LockState, rendering them unable to locked. Customers are asked to either return impacted locks for repair, or request a...

Fedora 26 : mediawiki (2017-05cb6287b7)

https://www.mediawiki.org/wiki/Releasenotes/1.28MediaWiki1.28.1 Changes since 1.28.0 - $wgRunJobsAsync is now false by default T142751. This change only affects wikis with $wgJobRunRate 0. - Fix fatal from 'WaitConditionLoop' not being found, experienced when a wiki has more than one database...

Man Accidentally Destroyed Production Database on First Day of His Job

By Waqas We all make mistakes, but some mistakes are fatal ending up with devastating consequences just like one of those Amazon engineers whos typo error caused a major service outage worldwide. But then theres this man /cscareerthrowaway567 who recently posted on Reddit explaining that he...

OpenVPN 2.4.0 - Unauthenticated Denial of Service Exploit

Exploit for multiple platform in category dos / poc !/usr/bin/env python3 ''' $ ./dosserver.py & $ sudo ./openvpn-2.4.0/src/openvpn/openvpn conf/server-tls.conf ... Fri Feb 24 10:19:19 2017 192.168.149.1:64249 TLS: Initial packet from AFINET192.168.149.1:64249, sid=9a6c48a6 1467f5e1 Fri Feb 24...

OpenVPN 2.4.0 - Denial of Service

!/usr/bin/env python3 ''' $ ./dosserver.py & $ sudo ./openvpn-2.4.0/src/openvpn/openvpn conf/server-tls.conf ... Fri Feb 24 10:19:19 2017 192.168.149.1:64249 TLS: Initial packet from AFINET192.168.149.1:64249, sid=9a6c48a6 1467f5e1 Fri Feb 24 10:19:19 2017 192.168.149.1:64249 Assertion failed at...

Receiver Crash: A Fatal Error Cccurred. Would You Like to Restart Citrix Receiver?

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Receiver gives a fatal error intermittently to all users. Trying to uninstall/install Receiver produces...

WhatsApp Android text Crash 0day Exploit

This code work on all Android versions. Don't work on all android emulators as nexus. It is a short code that acts on android. When Android PROCESS the code, the app gets a crash. Don't work if android don't process directly the code. tested and work 100% on: - whatsapp message. - whatsapp...

SMF 2.0.10 Remote Memory Exfiltration Exploit

Exploit for php platform in category web applications !/usr/bin/python -- coding: iso-8859-15 -- Title: SMF Filippo Roncari Truel Lab http://lab.truel.it import sys, requests, time, os, socket, thread, base64, string, urllib from multiprocessing import Process Payload config bytesnum = 000 num of...

Fedora 20 : php-horde-kronolith-4.2.4-1.fc20 (2014-16397)

kronolith 4.2.4 - jan Make access to non-CalDAV remote calendars faster Bug 12379. - jan Continue with further events if parsing of one remote event date fails. - jan Fix JS error in month view with more events today than the maximum threshold. - mjr Fix fatal error when creating or modifying an...

glibc - NUL Byte gconv_translit_find Off-by-One

glibc - NUL Byte gconvtranslitfind Off-by-One // // Full Exploit: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/34421.tar.gz CVE-2014-5119.tar.gz // // // --------------------------------------------------- // CVE-2014-5119 glibc gconvtranslitfind exploit //...

Localize: PHP PDOException and Full Path Disclosure

hi phrasekey , agian! in phraseChange action if set to array pdo quote show error! line 755 index.php Warning: PDO::quote expects parameter 1 to be string, array given in /srv/data/web/vhosts/www.localize.im/htdocs/classes/Database.php on line 30 Fatal error: Uncaught exception 'PDOException' wit...

openSUSE Security Update : subversion (openSUSE-SU-2013:1006-1)

This update of subversion includes several bug and security fixes. - update to 1.7.10 bnc821505 CVE-2013-1968 CVE-2013-2088 CVE-2013-2112 - Client-side bugfixes : - fix 'svn revert' 'no such table: revertlist' spurious error - fix 'svn diff' doesn't show some locally added files - fix changelist...

Localize: Full path disclosure

I signed up for localize with [email protected], and localize sent me a verification link which was: http://www.localize.io/verify/e6be646b24pdd3w6d5c27ppa9a267ee7 When I visited that link I found it was showing the following error: Fatal error: Call to a member function...

Dilbert Cross Site Scripting

================================================================================ Cross Site Scripting on The Official Dilbert Website ================================================================================ Site: www.dilbert.com Date: 25/02/2014 Author: s4r4d0 Contact: s4r4d0atyahoodotcom...

New York Times Cross Site Scripting

================================================================================ Cross Site Scripting on New York Times ================================================================================ Site: www.nytimes.com Date: 25/02/2014 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal...

Telegraph Cross Site Scripting

================================================================================ Cross Site Scripting on The Telegraph ================================================================================ Site: www.telegraph.co.uk Date: 25/02/2014 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fata...

Texas A&M University Cross Site Scripting

======================================================================= XSS on Texas A&M University - xyleborini site ! ======================================================================= Site: xyleborini.tamu.edu Date: 17/09/2012 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal Error...

Stanford Cross Site Scripting

======================================================================= XSS on Stanford University - School of Medicine ======================================================================= Site: med.stanford.edu Date: 17/09/2012 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal Error...

University Of Wisconsin - Madison Cross Site Scripting

======================================================================= XSS on Comm Arts Departement of University - Wisconsin-Madison ======================================================================= Site: commarts.wisc.edu Date: 15/09/2012 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team:...

UNESCO E-platform domain got hacked by Fatal Error Crew

UNESCO E-platform domain got hacked by Fatal Error Crew The E-Platform domain of one of the Biggest Organisation United Nations Educational, Scientific and Cultural Organization UNESCO got hacked and defaced by Fatal Error Crew hackers . Mirror of hack is available here...