DEBIAN-CVE-2017-5375

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...

just-land.com XSS vulnerability

Open Bug Bounty ID: OBB-628609 Description| Value ---|--- Affected Website:| just-land.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

KLA11253 Microsoft Advisory for Microsoft Windows

On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities known as Spectre and Meltdown involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. On May 21st, a new subclass ...

just-eat.es Open Redirect vulnerability

Open Bug Bounty ID: OBB-607006 Description| Value ---|--- Affected Website:| just-eat.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

just-be-it.com XSS vulnerability

Open Bug Bounty ID: OBB-550755 Description| Value ---|--- Affected Website:| just-be-it.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

just-soaps.com XSS vulnerability

Open Bug Bounty ID: OBB-550742 Description| Value ---|--- Affected Website:| just-soaps.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-11874

Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard CFG to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time JIT compiler,...

Just Dial Marketplace 1.0 SQL Injection

Exploit Title: Just Dial Marketplace Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/just-dial-marketplace Demo: http://classified.scriptzee.com/ Version: 1.0 Category: Webapps Tested on:...

Just Dial Marketplace 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Just Dial Marketplace Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/just-dial-marketplace Demo: http://classified.scriptzee.com/...

Just Dial Marketplace 1.0 - SQL Injection

Just Dial Marketplace 1.0 - SQL Injection Exploit Title: Just Dial Marketplace Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/just-dial-marketplace Demo: http://classified.scriptzee.com/ Version: 1....

Just Dial Marketplace 1.0 - SQL Injection

Exploit Title: Just Dial Marketplace Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/just-dial-marketplace Demo: http://classified.scriptzee.com/ Version: 1.0 Category: Webapps Tested on:...

CVE-2017-2154

Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 Standard, JUST Office 3 Eco Print Package, JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Poli...

CVE-2017-2154

Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 Standard, JUST Office 3 Eco Print Package, JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Poli...

Design/Logic Flaw

Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 Standard, JUST Office 3 Eco Print Package, JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Poli...

CVE-2017-2154

Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 Standard, JUST Office 3 Eco Print Package, JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Poli...

CVE-2017-2154

CVE-2017-2154 concerns an untrusted DLL search path in multiple JustSystems/Hanako-and-related products (Hanako 2015–2017, Hanako Pro 3, JUST Office 3 variants, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, and related packages). The underlying issue is insecure lo...

Just Another Video Script 1.4.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Just Another Video Script 1.4.3 - SQL Injection Google Dork: N/A Date: 25.03.2017 Vendor Homepage: http://justanothervideoscript.com/ Software: http://justanothervideoscript.com/demo Demo: http://javsdemo.com/ Version: 1.4.3...

Open Source Malware Analysis Platform: FAME

Open Source Malware Analysis Platform FAME is an open source malware analysis platform that is meant to facilitate analysis of malware-related files, leveraging as much knowledge as possible in order to speed up and automate end-to-end analysis. FAME should be seen as a malware analysis framework...

Mozilla: asm.js JIT-spray bypass of ASLR and DEP (MFSA 2017-06)

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...

Just Dial Marketplace Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Just Dial Marketplace Script Script Buy Now: http://scriptfirm.com/just-dial-marketplace Author: İhsan Şencan Author Web:...