WD My Cloud Mirror 2.11.153 Remote Command Execution / Authentication Bypass

Exploit Title: WD My Cloud Mirror 2.11.153 RCE and Authentication Bypass Date: 24.01.2017 Software Link: https://www.wdc.com Exploit Author: Kacper Szurek Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ Category: local 1. Description Itas possible to execute arbitra...

WD My Cloud Mirror 2.11.153 RCE and Authentication Bypass Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: WD My Cloud Mirror 2.11.153 RCE and Authentication Bypass Date: 24.01.2017 Software Link: https://www.wdc.com Exploit Author: Kacper Szurek Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/...

WD My Cloud Mirror 2.11.153 - Authentication Bypass / Remote Code Execution

Exploit Title: WD My Cloud Mirror 2.11.153 RCE and Authentication Bypass Date: 24.01.2017 Software Link: https://www.wdc.com Exploit Author: Kacper Szurek Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ Category: local 1. Description It’s possible to execute arbitra...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-45.6.0esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For mo...

GNU Wget < 1.18 - Access List Bypass / Race Condition

''' ============================================= - Discovered by: Dawid Golunski - dawidatlegalhackers.com - https://legalhackers.com - https://legalhackers.com/advisories/Wget-Exploit-ACL-bypass-RaceCond-CVE-2016-7098.html - CVE-2016-7098 - Release date: 24.11.2016 - Revision 1.0 - Severity:...

Mirror Manager Arbitrary Code Execution Vulnerability

Mirror Manager is a set of database management tools for use in Fedora. A security vulnerability exists in Mirror Manager 0.7.2 and earlier versions that can be exploited by remote attackers to execute arbitrary code...

CVE-2016-1000003

Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code...

CVE-2016-1000003

Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code...

Remote code execution

Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code...

CVE-2016-1000003

CVE-2016-1000003 affects Mirror Manager versions 0.7.2 and earlier, with a remote code execution flaw in the checkin code. Exploitation would come from a remote attacker without authentication to run arbitrary code on the affected system; impact includes full compromise of the host depending on p...

CVE-2016-1000003

Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code...

[slackware-security] curl

New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.50.3-i586-1slack14.2.txz: Upgraded. Fixed heap overflows in four libcurl functions: curlescape,...

Microsoft Internet Explorer 11 (Windows 10) - VBScript Memory Corruption (MS16-051)

Source: https://github.com/theori-io/cve-2016-0189 CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBScript Memory Corruption in IE11 Tested on Windows 10 IE11. Write-up http://theori.io/research/cve-2016-0189 To run 1. Download support/.dll or compile .cpp for yourself and exploit/.html...

Microsoft Internet Explorer 11 (Windows 10) - VBScript Memory Corruption (MS16-051)

Microsoft Internet Explorer 11 Windows 10 - VBScript Memory Corruption MS16-051 Source: https://github.com/theori-io/cve-2016-0189 CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBScript Memory Corruption in IE11 Tested on Windows 10 IE11. Write-up http://theori.io/research/cve-2016-018...

financialmirror.com XSS vulnerability

Vulnerable URL: http://www.financialmirror.com/blog-results.php?q=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:|...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-thunderbird-45.0-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...

Microsoft Windows - Kernel 'win32k.sys' Privilege Escalation (MS14-058)

Exploit for windows platform in category local exploits Sources: https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-lab-exploiting-cve-2014-4113.pdf https://github.com/sam-b/CVE-2014-4113 EDB Mirror: https://www.exploit-db.com/docs/39665.pdf Trigger and exploit code for CVE-2014-4113:...

Mystery of Mirror of Death 1 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mystery of Mirror of Death 1 published at the 'play' market has multiple vulnerabilities...

Mystery of Mirror of Death2 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Mystery of Mirror of Death2 published at the 'play' market has multiple vulnerabilities...

Mirror HD - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Mirror HD published at the 'play' market has multiple vulnerabilities...