Exploit for Code Injection in Samba

SambaHunter It is a simple script to exploit RCE for Samba CV...

CVE-2017-9287

servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0...

CVE-2017-9287

servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0...

metube.id XSS vulnerability

Vulnerable URL: http://www.metube.id/search/videos/?keyword=alert'OPENBUGBOUNTY';...

recupe.net XSS vulnerability

Vulnerable URL: http://www.recupe.net/recherchedons.php?idtag=7"'--!confirmOPENBUGBOUNTY//...

Cisco Firepower System Software URL Filtering Bypass Vulnerability

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. The vulnerability exists because the URL Filtering license for the affected...

Heap overflow

An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution. An attacker can send or provide a malicious XLS file to trigg...

CVE-2017-2799

An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted XLS file can cause a heap corruption resulting in arbitrary code execution. An attacker can send or provide a malicious XLS file to trigg...

Open Source Hackers Tool Belt: Pybelt

Open Source Hackers Tool Belt Pybelt is an open source hackers tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type verification tool Proxy finding tool XSS scanner It is capable of cracking hashes without prior knowledge of the algorithm, scanning por...

topolino.it XSS vulnerability

Vulnerable URL: http://www.topolino.it/ricerca/?cerca=prompt'OPENBUGBOUNTY'...

onedio.ru XSS vulnerability

Vulnerable URL: http://onedio.ru//search/news/f"...

Recent Python Meterpreter Improvements

The Python Meterpreter has received quite a few improvements this year. In order to generate consistent results, we now use the same technique to determine the Windows version in both the Windows and Python instances of Meterpreter. Additionally, the native system language is now populated in the...

novalmadavelha.pt XSS vulnerability

Vulnerable URL: http://novalmadavelha.pt/index.php?searchValue="=Ok=searchFO Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Cisco WebEx Meetings Server Information Disclosure Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to access scheduled customer meetings. The vulnerability is due to an incomplete configuration of the robots.txt file on customer-hosted WebEx solutions and occur...

May 9, 2017—KB4019474 (OS Build 10240.17394)

None None...

May 9, 2017—KB4019472 (OS Build 14393.1198)

None None...

Lenovo Active Protection System Privilege Escalation - Lenovo Support US

No description provided...

monnaies-billets-collection.fr XSS vulnerability

Vulnerable URL: http://monnaies-billets-collection.fr/resultats.asp?langue=fr=...

monnaies-antiques.com XSS vulnerability

Vulnerable URL: http://monnaies-antiques.com/resultats.asp?langue=fr=...

einsteinrecovery.org XSS vulnerability

Open Bug Bounty ID: OBB-233374 Description| Value ---|--- Affected Website:| einsteinrecovery.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...