Microsoft Windows Graphics Component CVE-2016-3209 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft .NET Framework 3.0 SP2 Microsoft .NET Framework 3.5 Microsoft .NET Framewo...

Microsoft Windows Graphics Component CVE-2016-3262 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Live Meeting 2007 Console Microsoft Lync 2010 32-bit Microsoft Lync 2010...

Microsoft Windows Graphics CVE-2016-7182 Remote Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the kernel privileges. Technologies Affected Microsoft Live Meeting 2007 Console Microsoft Lync 2010 32-bit Microsoft Lync 2010...

Sandcat Browser 5.3 - PenTest Oriented Web Browser

Sandcat is a lightweight multi-tabbed web browser that combines the speed and power of Chromium and Lua. Sandcat comes with built-in live headers, an extensible user interface and command line console, resource viewer, and many other features that are useful for web developers and pen-testers and...

Joomla com_jsjobs SQL injection Vulnerability

Exploit for php platform in category web applications |✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚ !! Exploit Title : Joomla comjsjobs SQL injection Vulnerability !! Exploit Author : xBADGIRL21 !! Dork : inurl:index.php?option=comjsjobs !! Vendor Homepage : http://www.joomsky.com !! MyBlog :...

WordPress Directory Themes Arbitrary Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Theme Directory Arbitrary Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:/wp-content/themes/Directory/ Vendor Homepage : https://templatic.com/ version : 2.0.16 - 2.0.14 & maybe high or lower Test...

Wordpress force download Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress force download Arbitrary File Download Dork 1 : inurl:force-download.php?file=wp-content/uploads Dork 2 : inurl:wp-content/uploads inurl:force-download.php?file= Vendor Homepage : http://elouai.com/force-download.php...

KV Site Admin CMS 3.0 SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : KV Site Admin CMS 3.0 SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : e.World Technology Ltd. All rights reserved "Admin Area - Version 3.0" Version: 3.0 MyBlog: http://xbadgirl21.blogspot.com Tested on: BackBox...

WordPress KBoard Cross Site Scripting

Exploit Title : WordPress Plugin KBoard - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.cosmosfarm.com/products/kboard Category Webapps Tested on Win Version : Before 4.4 Date 2016/09/26 PoC =Cross Site Scripting : Payload : 1" onmouseover=prompt"Persian"...

Moderate: Red Hat Security Advisory: org.ovirt.engine-root security, bug fix, and enhancement update

An update for org.ovirt.engine-root is now available for RHEV Engine version 4.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

MSI - NTIOLib.sys WinIO.sys Local Privilege Escalation

MSI - NTIOLib.sys WinIO.sys Local Privilege Escalation Exploit Title: MSI NTIOLib.sys, WinIO.sys local privilege escalation Date: 2016-09-26 Exploit Author: ReWolf Vendor Homepage: http://www.msi.com Version: too many Tested on: Windows 10 x64 TH2, RS1 Full description:...

Windows Forensic Data Collection: IR-rescue

Windows Forensic Data Collection ir-rescue is a Windows Batch script that collects a myriad of forensic data from 32-bit and 64-bit Windows systems while respecting the order of volatility. It is intended for incident response use at different stages in the analysis and investigation process. It...

Announcing the Third Annual Flare-On Challenge

Let fall be the season for reverse engineering! On Sept. 23, 2016, the FireEye Labs Advanced Reverse Engineering FLARE team will be hosting its third annual Flare-On reverse engineering contest with a designated start time of 8pm ET. This is a CTF-style challenge for all active and aspiring rever...

Generalized SQL Injection Vulnerability in VOD Live Streaming System of Nanjing Suaxing Information Technology Development Co.

Nanjing Suya Star Information Technology Development Co., Ltd. is for the school distance education and campus entertainment on demand needs and the development of a set of application systems. A generic SQL injection vulnerability exists in the VOD on-demand live streaming system of Nanjing Suya...

WordPress WP Live Chat Support Plugin 6.2.03 - XSS

WP Live Chat Support Plugin 6.2.03 is prone to a Cross-site scripting XSS vulnerability. This vulnerability allows to perform a number of arbitrary actions via wp-live-chat-support/functions.php line 1233. Solution Update the plugin. This vulnerability was fixed in 6.2.04...

Unauthorized Access Vulnerability in Zhongke Dayang 3GLive Multimedia Gateway

ZTE 3GLive multimedia is relying on 3G network technology to provide a new means of live broadcasting. Unauthorized access vulnerability exists in the 3GLive Multimedia Gateway, which can be exploited by unauthorized attackers to access /monitor?lan=1 to directly enter the backend...

LazyMap - Automate NMAP Scans and Generate Custom Nessus Policies Automatically

Automate NMAP scans and custom Nessus polices. Installing git clone https://github.com/commonexploits/port-scan-automation.git How To Use ./lazymap.sh Features Discovers live devices Auto launches port scans on only the discoverd live devices Can run mulitple instances on multiple adaptors at onc...

KV Site Admin CMS 3.0 SQL Injection

Exploit Title : KV Site Admin CMS 3.0 SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : e.World Technology Ltd. All rights reserved "Admin Area - Version 3.0" Version: 3.0 MyBlog: http://xbadgirl21.blogspot.com Tested on: BackBox skype:xbadgirl21 Video Proof :...

The vulnerability of the Microsoft Office suite of programs, the Word Viewer program for reading doc files, the Windows operating system, Microsoft Lync and Skype for Business instant messaging programs, and the Live Meeting software used for web conferences allow a perpetrator to execute arbitrary code.

The vulnerability of the Windows font library in the Microsoft Office software suite, as well as programs like Word Viewer for reading DOC files, Windows operating systems, Microsoft Lync and Skype for Business instant messaging applications, and the Live Meeting web conference software, exists d...

The vulnerability of the Microsoft Office suite of programs, the Word Viewer program for reading doc files, the Windows operating system, Microsoft Lync and Skype for Business instant messaging programs, and the Live Meeting software used for web conferences allow a perpetrator to execute arbitrary code.

The vulnerability of the Windows font library in the Microsoft Office software suite, including Word Viewer for reading DOC files, as well as operating systems like Windows, and messaging applications like Microsoft Lync and Skype for Business, and the software for conducting web conferences like...