Trend Micro DirectPass - Bypass & Persistent Vulnerability

Document Title: =============== Trend Micro DirectPass - Bypass & Persistent Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1986 Video: https://www.youtube.com/watch?v=NImym71f3Bc Release Date: ============= 2016-10-16 Vulnerability Laboratory ID VL-ID:...

404TinyShell connect over Protocol Instance

Document Title: =============== 404TinyShell connect over Protocol Instance References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1984 Video: https://www.youtube.com/watch?v=cQKGT1K8RZU Release Date: ============= 2016-10-15 Vulnerability Laboratory ID VL-ID:...

StrongPity APT Covets Secrets of Crypto Users

APT groups covet secrets, and one in particular has chosen to target users intent on protecting theirs. The group is known as StrongPity, and it’s been a characteristic APT outfit using its share of zero days and modular attack tools to infiltrate victims and conduct espionage. This summer,...

tinyshell - Python Client with PHP Shell

python Client with php shell , allows to connect and send commands over current protocol using POST and GET Requests Features 1. connect with direct session with no need for reverse connection . 2. support password protection . 3. can be binded to any file with no damage . 4. using GET/POST reque...

AVS Audio Converter 8.2.1 - Buffer Overflow Vulnerability

Product & Service Introduction: =============================== AVS Audio Editor is an audio file editor of its primary function is for editing audio files. It is able to cut, join, combine or split audio files. All these operations are done with great precision to the hundredth of a second. You...

phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability

Product & Service Introduction: =============================== phpCollab is an open source internet-enabled system for use in projects that require collaboration over the internet. Those organizations, such as consulting firms, that rely on a division between firm-side and client-side informatio...

VUPlayer 2.49 - (.pls) Buffer Overflow Vulnerability

VUPlayer is a freeware multi-format audio player for windows. Copy of the Vendor Homepage: http://vuplayer.com/vuplayer.php Technical Details & Description: ================================ The classic buffer overflow vulnerability is located in the software VUPlayer an attacker can manipulate th...

Cyberoam iview UTM v0.1.2.7 - (Ajax) XSS Web Vulnerability

Document Title: =============== Cyberoam iview UTM v0.1.2.7 - Ajax XSS Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1850 Cyberoam ID: 1059276 Security ID: NCR-2064 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID...

Researchers Break MarsJoke Ransomware Encryption

Victims infected with the MarsJoke ransomware can decrypt their files after researchers last week cracked the encryption in the CTB-Locker lookalike. A trio of researchers from Kaspersky Lab’s Anti-Ransom Team–Anton Ivanov, Orkhan Mamedov, and Fedor Sinitsyn–described Monday how errors in the...

AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit

Document Title: =============== AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1966 Release Date: ============= 2016-10-03 Vulnerability Laboratory ID VL-ID: ===================================...

imagemagick mogrify global buffer overflow Vulnerability

Exploit for windows platform in category remote exploits imagemagick identify suffers of a global buffer overflow issue, which I reported and has been patched, you can find a reproducer in the github bug tracker issue link issue: https://github.com/ImageMagick/ImageMagick/issues/280 patch:...

Drupal 8 configuration file download vulnerability analysis-vulnerability warning-the black bar safety net

Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-09-22 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities,...

Sparkasse (Bank) - Service Security Advisory WB021 2016

Document Title: =============== Sparkasse Bank - Service Security Advisory WB021 2016 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1959 Download PDF: https://www.vulnerability-lab.com/resources/documents/spk-sec-WB021.pdf Vulnerability Magazine:...

Tesla Fixes 'Critical' Remote Hack Vulnerability

Several models of the Tesla S cars were hacked by researchers who were able to abruptly stop the car in its tracks, pop open the trunk while the car was being driven, and remotely turn on and off the windshield wipers. The hacks demonstrated by China’s Keen Security Lab, a division of Tencent, we...

Internet Bug Bounty: PHP Integer Overflow in gdImageWebpCtx

PHP Integer Overflow in gdImageWebpCtx 1. Affected Version + PHP 7.0.10 2. Credit This vulnerability was discovered by Ke Liu of Tencent's Xuanwu LAB. 3. Testing Environments + OS: Ubuntu + PHP: 7.0.10 + Compiler: Clang + CFLAGS: -g -O0 -fsanitize=address 4. PoC 5. Vulnerability Details...

Internet Bug Bounty: CVE-2016-7418 PHP Out-Of-Bounds Read in php_wddx_push_element

CVE-2016-7418 PHP Out-Of-Bounds Read in phpwddxpushelement 1. Affected Version + PHP 7.0.10 + PHP 5.6.25 2. Credit This vulnerability was discovered by Ke Liu of Tencent's Xuanwu LAB. 3. Testing Environments + OS: Ubuntu + PHP: 7.0.10 + Compiler: Clang + CFLAGS: -g -O0 -fsanitize=address 4. PoC...

Phony Pokémon GO Android App Gave Attackers Root Access

A rogue and malicious app that billed itself as a “Guide for Pokémon GO” managed to make it into Google Play’s marketplace. Once installed, the malware-laced app gave attackers root access to any Android device it was installed on. The app, actually a Trojan in disguise, contained a nasty piece o...

Internet Bug Bounty: CVE-2016-3182 OpenJPEG color_esycc_to_rgb Out-of-Bounds Read Vulnerability

CVE-2016-3182 OpenJPEG coloresycctorgb Out-of-Bounds Read Vulnerability 1. About OpenJPEG OpenJPEG is an open-source JPEG 2000 codec written in C language. It's widely used in lots of Linux OSes such as Ubuntu, RedHat, Debian, Fedora, and so on. The official repository of the OpenJPEG project is...

FLV To MP3 Converter 3.0.5 - Reverse Engineering Issue

Document Title: =============== FLV To MP3 Converter 3.0.5 - Reverse Engineering Issue References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1938 Release Date: ============= 2016-09-13 Vulnerability Laboratory ID VL-ID: ==================================== 19...

SugarCRM v6. 5. 23 PHP deserialize an object injection vulnerability

Author: p0wd3r know Chong Yu 404 security lab Date: 2016-09-12 0x00 vulnerability overview 1. Vulnerability description SugarCRM（http://www.sugarcrm.com/ is a set of open source Customer Relationship Management System. Recent researchers found in its=6.5.23 version exists in the deserialization...