lms-test.cedis.fu-berlin.de Cross Site Scripting vulnerability OBB-2815948

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Weak Password Vulnerability in Zhongfu Information Security and Confidentiality Comprehensive Management Platform

Founded in 2002, CDF Information specializes in the research, development, sales and provision of total solutions for information security products. A weak password vulnerability exists in Zung Fu's comprehensive information security and confidentiality management platform, which can be exploited...

Command Execution Vulnerability in FUDECMS of Qingdao Fudek Network Technology Co.

Qingdao Fu Tak Network Technology Co., Ltd. specializes in website design and production, network marketing and promotion. There is a command execution vulnerability in FUDECMS of Qingdao Fu De Network Technology Co. Attackers can use this vulnerability to obtain server privileges...

The Origins of the Names TaoSecurity and the Unit Formerly Known as TAO

What are the origins of the names TaoSecurity and the unit formerly known as TAO? Introduction I've been reading Nicole Perlroth's new book This Is How They Tell Me the World Ends. Her discussion of the group formerly known as Tailored Access Operations, or TAO, reminded me of a controversy that...

kungfutea.com.tw Cross Site Scripting vulnerability OBB-1208530

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Malicious Package

Overview drupal-fu is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using drupal-fu...

Code execution vulnerability in S-CMS enterprise website builder system fu***.php

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A code execution vulnerability exists in fu.php of the S-CMS enterprise website builder system. An attacker can exploit the...

Solaris xscreensaver 11.4 - Privilege Escalation

Exploit Title: Solaris xscreensaver 11.4 - Privilege Escalation Date: 2019-10-16 Exploit Author: Marco Ivaldi Vendor Homepage: https://www.oracle.com/technetwork/server-storage/solaris11/ Version: Solaris 11.x Tested on: Solaris 11.4 and 11.3 X86 CVE: N/A !/bin/sh raptorxscreensaver - Solaris 11....

SQL Injection Vulnerability in Beijing Fu Ren Xin Zhi Psychological Assessment File System

Beijing Fu Ren Xin Zhi Software Technology Co., Ltd. is a professional psychology service organization specializing in the research, development, production and sales of applied psychology software, psychological assessment software, psychological assessment system, psychological sand table,...

SQL Injection Vulnerability in Beijing Fu Ren Xin Zhi Psychological Assessment File System

Beijing Fu Ren Xin Zhi Software Technology Co., Ltd. is a professional psychology service organization specializing in the research, development, production and sales of applied psychology software, psychological assessment software, psychological assessment system, psychological sand table,...

SQL Injection Vulnerability in deituiCMS fu***.php File

deituiCMS is a PHP-based open source content management system. A SQL injection vulnerability exists in the deituiCMS fu.php file, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in ZZCMS fu***.php Page

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the ZZCMS fu.php page. An attacker can exploit the vulnerability to obtain sensitive information from the database...

fu-now.com XSS vulnerability

Open Bug Bounty ID: OBB-610568 Description| Value ---|--- Affected Website:| fu-now.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fu-joe.com.tw XSS vulnerability

Open Bug Bounty ID: OBB-549054 Description| Value ---|--- Affected Website:| fu-joe.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Elaborate scripting-fu used in espionage attack against Saudi Arabia Government entity

This post was co-authored by David Sánchez and Jérôme Segura We recently came across a campaign targeting a Saudi Arabia Government entity via a malicious Word document which at first reminded us of an attack we had previously described on this blog. In our previous research, we detailed how an...

See my how-to the Apache fuzzing and dig to a value of 1500 knife of vulnerability-vulnerability warning-the black bar safety net

Target In the AFL in the view of the Apache httpd server's crash logs, I found a lot of problems. For example, some crash testing with example in fuzz testing tools internal collapse, but also affect the test program stability. In this article, I will talk to you to explain the test case to crash...

RedHat Update for pki-core RHSA-2017:2335-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

English Fu the education system /VJ/PublicModule/MessageManage/Iframe_StuSend. aspx file pid parameter SQL injection vulnerability

No description provided by source...

Tree Fu Tom: Play and Learn - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Tree Fu Tom: Play and Learn published at the 'play' market has multiple vulnerabilities...

Kung Fu Do Fighting - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Kung Fu Do Fighting published at the 'play' market has multiple vulnerabilities...