Open Source Hackers Tool Belt: Pybelt

Open Source Hackers Tool Belt Pybelt is an open source hackers tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type verification tool Proxy finding tool XSS scanner It is capable of cracking hashes without prior knowledge of the algorithm, scanning por...

topolino.it XSS vulnerability

Vulnerable URL: http://www.topolino.it/ricerca/?cerca=prompt'OPENBUGBOUNTY'...

onedio.ru XSS vulnerability

Vulnerable URL: http://onedio.ru//search/news/f"...

Recent Python Meterpreter Improvements

The Python Meterpreter has received quite a few improvements this year. In order to generate consistent results, we now use the same technique to determine the Windows version in both the Windows and Python instances of Meterpreter. Additionally, the native system language is now populated in the...

novalmadavelha.pt XSS vulnerability

Vulnerable URL: http://novalmadavelha.pt/index.php?searchValue="=Ok=searchFO Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Cisco WebEx Meetings Server Information Disclosure Vulnerability

A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to access scheduled customer meetings. The vulnerability is due to an incomplete configuration of the robots.txt file on customer-hosted WebEx solutions and occur...

May 9, 2017—KB4019474 (OS Build 10240.17394)

May 9, 2017—KB4019474 OS Build 10240.17394 Improvements and fixes This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue where Windows Event Forwarding between two 2012 R2 servers makes reports...

May 9, 2017—KB4019472 (OS Build 14393.1198)

May 9, 2017—KB4019472 OS Build 14393.1198 Improvements and fixes This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue where the PC Settings pages do not display the correct options after the...

Lenovo Active Protection System Privilege Escalation - Lenovo Support US

No description provided...

monnaies-billets-collection.fr XSS vulnerability

Vulnerable URL: http://monnaies-billets-collection.fr/resultats.asp?langue=fr=...

monnaies-antiques.com XSS vulnerability

Vulnerable URL: http://monnaies-antiques.com/resultats.asp?langue=fr=...

einsteinrecovery.org XSS vulnerability

Open Bug Bounty ID: OBB-233374 Description| Value ---|--- Affected Website:| einsteinrecovery.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

comprendrechoisir.com XSS vulnerability

Vulnerable URL: http://www.comprendrechoisir.com/recherche?q=...

valor.com.br XSS vulnerability

Vulnerable URL: http://www.valor.com.br/search/apachesolrsearch/...

AntennaHouse DMC HTMLFilter PPT DHFSummary Code Execution Vulnerability

Summary An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted PPT file can cause a stack corruption resulting in arbitrary code execution. An attacker can send/provide maliciou...

CVE-2017-2149

The CVE-2017-2149 issue is an Untrusted search path vulnerability in Toshiba memory card installers, enabling a Trojan horse DLL to be loaded from an unspecified directory and allowing code execution with user privileges. Affected software includes several FlashAir/TransferJet related tools and c...

CVE-2017-2149

Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card wit...

mhahaber.com XSS vulnerability

Vulnerable URL: https://www.mhahaber.com/?s="/alert/OPENBUGBOUNTY/...

drk.de XSS vulnerability

Vulnerable URL: https://www.drk.de/suche/?id=502kesearchpi1page=1kesearchpi1sword=test...

CVE-2016-8721

An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A Wireless Access Points running firmware 1.1. Specially crafted web form input can cause an OS Command Injection resulting in complete compromise of the vulnerable device. An...