HackerOne: Minor Bug: Public un-compiled CSS with original sass, versioning, source map, comments, etc.

A stylesheet is available in a non-minified, non-compiled format. It includes sass, versioning, a source map, a style guide, comments, etc. see base64 encoded string at the very end of the document. https://hackerone.com/assets/application.css This alone is obviously not an exploit. However, it c...

humanimal.nu XSS vulnerability

Vulnerable URL: http://www.humanimal.nu/nl/site-map/elektronisch-dierendossier/102-activiteiten? Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

UBUNTU-CVE-2015-6654

The xenmemaddtophysmapone function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not limit the number of printk console messages when reporting a failure to retrieve a reference on a foreign page, which allows remote domains to cause a denial of service by leveraging permissions to map t...

WP Google Map Plugin < 3.0.0 - CSRF to Authenticated Cross-Site Scripting (XSS)

The lack of CSRF Protection could allow attackers to perform XSS attack against logged in administrators. ' / ' /...

Facebook Fired An Intern After He Exposes How to Track Users' Location

Previously, we posted about a privacy issue in Facebook messenger; Aran Khanna, a Harvard University student, discovered ‘A Marauder’s Map’ that could sense and give the geolocations of your friends on the messenger. Khanna had received an opportunity to work as an intern for Facebook… …But desti...

Heroes of Might and Magic III - '.h3m' Map file Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'zlib' class Metasploit3 'Heroes of Might and Magic III .h3m Map file Buffer Overflow', 'Description' = %q This module embeds an exploit into a...

Heroes Of Might And Magic III .h3m Map File Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'zlib' class Metasploit3 'Heroes of Might and Magic III .h3m Map file Buffer Overflow', 'Description' = %q This module embeds an exploit into a...

Heroes Of Might And Magic III .h3m Map File Buffer Overflow Exploit

This Metasploit module embeds an exploit into an uncompressed map file .h3m for Heroes of Might and Magic III. Once the map is started in-game, a buffer overflow occurring when loading object sprite names leads to shellcode execution. This module requires Metasploit: http://metasploit.com/downloa...

Scientific Linux Security Update : autofs on SL6.x i386/x86_64 (20150722)

It was found that program-based automounter maps that used interpreted languages such as Python would use standard environment variables to locate and load modules of those languages. A local attacker could potentially use this flaw to escalate their privileges on the system. CVE-2014-8169 Note:...

Heroes of Might and Magic III - Map Parsing Arbitrary Code Execution Exploit

Exploit for windows platform in category local exploits / Exploit Title : Heroes of Might and Magic III - Map Parsing Arbitrary Code Execution Date : 2015-07-29 Exploit Author : John AAkerblom, Pierre Lindblad Website: http://h3minternals.net Vendor Homepage : 3do.com defunct,...

Heroes of Might and Magic III - Map Parsing Arbitrary Code Execution

Heroes of Might and Magic III - Map Parsing Arbitrary Code Execution / Exploit Title : Heroes of Might and Magic III - Map Parsing Arbitrary Code Execution Date : 2015-07-29 Exploit Author : John AAkerblom, Pierre Lindblad Website: http://h3minternals.net Vendor Homepage : 3do.com defunct,...

Heroes of Might and Magic III - Map Parsing Arbitrary Code Execution

/ Exploit Title : Heroes of Might and Magic III - Map Parsing Arbitrary Code Execution Date : 2015-07-29 Exploit Author : John AAkerblom, Pierre Lindblad Website: http://h3minternals.net Vendor Homepage : 3do.com defunct, https://sites.google.com/site/heroes3hd/ Version : 4.0.0.0 AND HoMM 3 HD...

CentOS 6 : autofs (CESA-2015:1344)

Updated autofs packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Mapbox: Disclosure of map information

In July 2015, @hussain submitted a report where a GET request to an internal API endpoint /core/api/Map disclosed details of public maps in a Mapbox user's account. The disclosed information included the name, description, map identifier, geographic center, map layers, date created, and date last...

WordPress Easy2Map plugin SQL injection vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers to set up a personal blog site. easy2Map is one of the plug-ins to support the creation of customized Google maps . WordPress Easy2Map plugin...

Blackbone - Windows Memory Hacking Library

Blackbone, Windows Memory Hacking Library Features x86 and x64 support Process interaction Manage PEB32/PEB64 Manage process through WOW64 barrier Process Memory Allocate and free virtual memory Change memory protection Read/Write virtual memory Process modules Enumerate all 32/64 bit modules...

SUSE-SU-2015:1253-2 Security update for php5

This security update of PHP fixes the following issues: Security issues fixed: CVE-2015-4024 bnc931421: Fixed multipart/form-data remote DOS Vulnerability. CVE-2015-4026 bnc931776: pcntlexec did not check path validity. CVE-2015-4022 bnc931772: Fixed and overflow in ftpgenlist that resulted in a...

This Facebook Hack Allows You to Track Your Friends On Map

Remember the magical Marauder’s Map from the Harry Potter books that reveal the whereabouts of characters as they roam classrooms and the halls of Hogwarts school? A student developer from Cambridge has created a Chrome extension that works similar and also named it Marauder’s Map. The extension...

Третья конференция r0 Crew

Всем доброго времени суток! Рады сообщить, что 23.05.2015 состоится третья конференция форума reverse4you.org R0-Crew Conference. Основная тематика конференции: Реверс-инжиниринг. Низкоуровневое программирование. Поиск уязвимостей. Место проведения осталось прежним, это учебный центр «Славутич»...

CVE-2015-2755 WordPress AB Google Map Travel CSRF / XSS

=============================================================================== CSRF/Stored XSS Vulnerability in AB Google Map Travel AB-MAP Wordpress Plugin =============================================================================== . contents:: Table Of Content Overview ======== Title :Stor...