4176 matches found
CVE-2018-16252
FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection...
CVE-2018-16252
FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection...
Using AWS Account ID’s for IAM User Enumeration
The post Using AWS Account ID's for IAM User Enumeration appeared first on Rhino Security Labs...
FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection Vulnerability
Exploit for windows platform in category web applications Title: FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection Author: hyp3rlinx Vendor: www.eventlogxp.com Software: https://eventlogxp.com/download.php Affected Component: elex.exe CVE: N/A Description: Upon opening a...
FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection
FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection Title: FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection Author: hyp3rlinx Date: 2018-09-01 Vendor: www.eventlogxp.com Software: https://eventlogxp.com/download.php Affected Component: elex.exe CVE:...
FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection
Title: FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection Author: hyp3rlinx Date: 2018-09-01 Vendor: www.eventlogxp.com Software: https://eventlogxp.com/download.php Affected Component: elex.exe CVE: N/A Description: Upon opening a specially crafted .ELX file in Event Log...
FsPro Labs Event Log Explorer 4.6.1.2115 XML Injection
Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/FSPRO-LABS-EVENT-LOG-EXPLORER-XML-INJECTION-INFO-DISCLOSURE.txt + ISR: ApparitionSec Greetz: Greetz: indoushka | Eduardo Vendor www.eventlogxp.com Product Event Log Explorer v4.6.1.2115...
Adobe Pushes Out Unscheduled Creative Cloud Application Fix
Adobe released a second unscheduled fix this month, this time for a flaw in its Creative Cloud desktop application that could lead to privilege escalation. While the vulnerability CVE-2018-12829 was rated “important,” Adobe acknowledged on Tuesday that it is aware of a publicly available...
Dark Tequila Banking Malware Uncovered After 5 Years of Activity
Security researchers at Kaspersky Labs have uncovered a new, complex malware campaign that has been targeting customers of several Mexican banking institutions since at least 2013. Dubbed Dark Tequila, the campaign delivers an advanced keylogger malware that managed to stay under the radar for fi...
grafana -- LDAP and OAuth login vulnerability
Grafana Labs reports: On the 20th of August at 1800 CEST we were contacted about a potential security issue with the “remember me” cookie Grafana sets upon login. The issue targeted users without a local Grafana password LDAP & OAuth users and enabled a potential attacker to generate a valid cook...
cPanel Filename Based Stored XSS < v76 Exploit
Usage Info Create a file as named with your payload in /home/user/logs directory or run the php exploit. + Title: cPanel Filename Based Stored XSS http://ip:2082/cpsessXXXXXXXXXX/frontend/THEME/raw/index.html '; else die'An error occured.'; else echo 'Enter your payload: " "...
RHEL 6 : kernel (RHSA-2018:2390)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2390 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Modern operating systems implement...
CentOS 6 : kernel (CESA-2018:2390) (Foreshadow)
An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
cPanel 76 Cross Site Scripting
Title: cPanel Filename Based Stored XSS http://ip:2082/cpsessXXXXXXXXXX/frontend/THEME/raw/index.html '; else die'An error occured.'; else echo 'Enter your payload: " "'; // end of the script. ? Note: You cant create a file as named with / slash character by this exploit. This vulnerability is...
Sensio Labs Symfony HttpKernel Header Injection Vulnerability
Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework. The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . HttpKernel is one of the use of EventDispatcher components...
Sensio Labs Symfony Security Bypass Vulnerability (CNVD-2018-21473)
Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A security bypass vulnerability exists in Http Foundation ...
Sun Solaris 11.3 AVS Kernel - Local Privilege Escalation
/ Exploit Title: Solaris/OpenSolaris AVS kernel code execution Google Dork: if applicable Date: 24/7/2018 Exploit Author: mu-b Vendor Homepage: oracle.com Software Link: Version: Solaris 10, Solaris Sun Opensolaris include include include include include include include include include include...
Sun Solaris 11.3 AVS Kernel - Local Privilege Escalation
Sun Solaris 11.3 AVS Kernel - Local Privilege Escalation / Exploit Title: Solaris/OpenSolaris AVS kernel code execution Google Dork: if applicable Date: 24/7/2018 Exploit Author: mu-b Vendor Homepage: oracle.com Software Link: Version: Solaris 10, Solaris Sun Opensolaris include include include...
Sun Solaris 11.3 AVS Local Kernel Root
/ Exploit Title: Solaris/OpenSolaris AVS kernel code execution Google Dork: if applicable Date: 24/7/2018 Exploit Author: mu-b Vendor Homepage: oracle.com Software Link: Version: Solaris 10, Solaris Sun Opensolaris include include include include include include include include include include...