861 matches found
Joomla NS Download Shop 2.2.6 SQL Injection
Exploit Title: Joomla! Component NS Download Shop 2.2.6 - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: https://nswd.co/ Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/paid-downloads/ns-downloadshop/ Demo: https://ds.nswd.co/ Version: 2.2.6 Category:...
Tcpdump DNS Resolver Source Denial of Service Vulnerability
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.DNS parser is one of the Domain Name System DNS resolvers. A denial of...
ns-sirius.com XSS vulnerability
Vulnerable URL: http://www.ns-sirius.com/products.php?page=4=2&pmid1;=2%22%27--!%3E%3Cscript%3EalertOPENBUGBOUNTY%3C/script%3E&pmid2;=10&pmid3;== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
CVE-2016-3099
modns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled...
389-ds-base: Remote crash via crafted LDAP messages
An invalid pointer dereference flaw was found in the way 389-ds-base handled LDAP bind requests. A remote unauthenticated attacker could use this flaw to make ns-slapd crash via a specially crafted LDAP bind request, resulting in denial of service...
389-ds-base security and bug fix update
1.3.5.10-20 - Bump version to 1.3.5.10-20 - Resolves: bug 1437005 - CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages 1.3.5.10-19 - Release 1.3.5.10-19 - Resolves: bug 1429495 - ns-slapd dies under heavy load - Resolves: bug 1429498 - A filtered nsrole that specifies an empty nsro...
LLMNR NBT-NS MDNS Poisoner: Responder
LLMNR NBT-NS MDNS Poisoner: Responder Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication. This tool is an LLMNR, NBT-NS and MDNS responder, it will...
ns-sirius.com XSS vulnerability
Vulnerable URL: http://www.ns-sirius.com/products.php?plevel=2&pmid1;=1&pmid2;=27%22%3E%3Csvg/onload=prompt/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7710944...
The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability in AWS, Google Cloud, Rackspace and Digital Ocean
Recently, I found that Digital Ocean suffered from a security vulnerability in their domain import system which allowed for the takeover of 20K domain names. If you haven’t given that post a read I recommend doing so before going through this write up. Originally I had assumed that this issue was...
LLMNR, NBT-NS and MDNS Responder for Windows
LLMNR, NBT-NS and MDNS Responder for Windows This tool is first an LLMNR, NBT-NS and MDNS responder, it will answer to specific NBT-NS NetBIOS Name Service queries based on their name suffix see: http://support.microsoft.com/kb/163409 . By default, the tool will only answers to File Server Servic...
DEBIAN-CVE-2016-5277
Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging improper interaction between...
UBUNTU-CVE-2016-5278
Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...
UBUNTU-CVE-2016-5263
The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages "type confusion."...
The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
The use of this function after release in nsTextEditRules::CreateMozBR in Mozilla Firefox ESR allows malicious actors operating remotely to execute arbitrary code or cause service failures errors in handling dynamic memory...
BadTunnel: Cross-Segment hijacking the broadcast Protocol-vulnerability warning-the black bar safety net
! 0x00 introduction This paper proposes a new attack model, can cross network segment hijacking the TCP/IP broadcast Protocol, we named it“BadTunnel” in. Using this method, you can achieve cross-subnet NetBIOS Name Service Spoofing attacks. Both the attacker and the user are in the same network...
NS International - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application NS International published at the 'play' market has multiple vulnerabilities...
NS Reisplanner Xtra - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application NS Reisplanner Xtra published at the 'play' market has multiple vulnerabilities...
网康 NS-ASG 6.2 用安全网关 /admin/cert_download.php 任意 文件下载
No description provided by source...