Slackor - A Golang Implant That Uses Slack As A Command And Control Server

A Golang implant that uses Slack as a command and control channel. This project was inspired by Gcat and Twittor. This tool is released as a proof of concept. Be sure to read and understand the Slack App Developer Policy before creating any Slack apps. Setup Note: The server is written in Python ...

trk.questmedia.ru Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting trk.questmedia.ru website and its users. Following...

Tuneclone 2.20 - Local SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: TuneClone Local Seh Exploit Date: 19.06.2019 Vendor Homepage: http://www.tuneclone.com/ Software Link: http://www.tuneclone.com/tuneclonesetup.exe Exploit Author: Achilles Tested Version: 2.20 Tested on: Windows XP SP3 EN 1.-...

Support Board - Chat And Help Desk | Support & Chat <= 1.2.8 Stored XSS

Info: Weak security measures like bad textarea data filtering has been discovered in the «Support Board - Chat And Help Desk | Support & Chat». Demo Website: https://codecanyon.net/item/support-board-chat-and-help-desk/20752085 Backend: https://board.support/desk-demo/?login=true Login / Password...

Support Board - Chat And Help Desk | Support & Chat <= 1.2.8 Stored XSS

Info: Weak security measures like bad textarea data filtering has been discovered in the «Support Board - Chat And Help Desk | Support & Chat». Demo Website: https://codecanyon.net/item/support-board-chat-and-help-desk/20752085 Backend: https://board.support/desk-demo/?login=true Login / Password...

Failed to launch ICA file after upgrade to Citrix Receiver for Windows 4.9 LTSR CU6 on Windows server

After upgrade to Citrix Receiver for Windows 4.9 LTSR CU6 on Windows 2008R2/2012 end point, user is not able to launch any published resource due to wfica32.exe crashed with bugcheck code 0xc0000135. The following error might be popped-up: Unable to launch your applicationContact your help desk a...

Failed to launch session "session_name". Error code: 2501 on Citrix Workspace App During App/Desktop Launch

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error is returned by the Citrix Gateway to Citrix CWA app when application/desktop...

CVE-2016-8897: Improper Neutralization of Special Elements used in an SQL Command

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php...

OSIF - Open Source Information Facebook

OSIF is an accurate facebook account information gathering, all sensitive information can be easily gathered even though the target converts all of its privacy to only me, Sensitive information about residence, date of birth, occupation, phone number and email address. Installation $ pkg update...

SUSE SLED15 / SLES15 Security Update : cf-cli (SUSE-SU-2019:1220-1)

"This update for cf-cli fixes the following issues : cf-cli was updated: to version 6.43.0 bsc1132242 Enhancements : cf curl supports a new --fail flag primarily for scripting purposes which returns exit code 22 for server errors story Improves cf delete-orphaned-routes such that it uses a...

Description of the security update for SharePoint Foundation 2010: May 14, 2019

Description of the security update for SharePoint Foundation 2010: May 14, 2019 Summary This security update resolves a spoofing vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To learn more abo...

Shopify: help.shopify.com Cross Site Scripting

Hello Security Team. Tested windows 10 and edge Microsoft Edge 44.17763.1.0 , internet explorer Test Url : https://help.shopify.com/it/partners/resources/marketing-pack-for-accountants Payload: ?v0sjx'-alert1-'uyvvr=1 Proof Url: Open Url: edge , internet explorer , click me "Condividi il tuo...

MailCarrier 2.51 HELP Remote Buffer Overflow Exploit

!/usr/bin/python Exploit Title: MailCarrier 2.51 - Remote Buffer Overflow in "HELP" commandSMTP Exploit Author: Vinaykumar Yennam and Dheepshika Raghunathan Vendor Homepage: https://www.tabslab.com/ Version: 2.51 Software Link: N.A Tested on: Windows XP Prof SP3 ENG x86 CVE: TBC from Mitre Create...

CVE-2019-11682

A buffer overflow in the SMTP response service in MailCarrier 2.51 allows the attacker to execute arbitrary code remotely via a long HELP command, a related issue to CVE-2019-11395...

Buffer overflow

A buffer overflow in the SMTP response service in MailCarrier 2.51 allows the attacker to execute arbitrary code remotely via a long HELP command, a related issue to CVE-2019-11395...

PT-2019-12478

Name of the Vulnerable Software and Affected Versions MailCarrier version 2.51 Description A buffer overflow in the SMTP response service allows an attacker to execute arbitrary code remotely via a long HELP command. Recommendations For MailCarrier version 2.51, consider disabling the SMTP respon...

CVE-2019-11682: Out-of-bounds Write

A buffer overflow in the SMTP response service in MailCarrier 2.51 allows the attacker to execute arbitrary code remotely via a long HELP command, a related issue to CVE-2019-11395...

MailCarrier 2.51 HELP Remote Buffer Overflow

!/usr/bin/python Exploit Title: MailCarrier 2.51 - Remote Buffer Overflow in "HELP" commandSMTP Date: 04/28/2019 Exploit Author: Vinaykumar Yennam and Dheepshika Raghunathan Vendor Homepage: https://www.tabslab.com/ Version: 2.51 Software Link: N.A Tested on: Windows XP Prof SP3 ENG x86 CVE: TBC...

Cutter - Free And Open-Source GUI For Radare2 Reverse Engineering Framework

Cutter is a free and open-source GUI for radare2 reverse engineering framework. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. Cutter is created by reverse engineers for reverse engineers. Downloading a release Cutter ...

CVE-2019-1827

A vulnerability in the Online Help web service of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the service. The vulnerability exists because the Online Hel...