12878 matches found
WP Maintenance <= 5.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
No nonce protection on form submissions leading to CSRF and no input/output sanitization allowing for XSS when CSRF is exploited. PoC...
Centova Cast 3.2.12 Denial Of Service
Exploit Title: Centova Cast 3.2.12 - Denial of Service PoC Date: 2019-11-18 Exploit Author: DroidU Vendor Homepage: https://centova.com Affected Version: =v3.2.12 Tested on: Debian 9, CentOS 7 =============================================== The Centova Cast becomes out of control and causes 100%...
nipper-ng 0.11.10 - Remote Buffer Overflow Exploit
Exploit Title: nipper-ng 0.11.10 - Remote Buffer Overflow PoC Exploit Author: Guy Levin https://blog.vastart.dev Vendor Homepage: https://tools.kali.org/reporting-tools/nipper-ng Software Link: https://code.google.com/archive/p/nipper-ng/source/default/source Version: 0.11.10 Tested on: Debian CV...
Lexmark Services Monitor 2.27.4.0.39 Directory Traversal
Exploit Title: Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Google Dork: N/A Date: 2019-11-15 Exploit Author: Kevin Randall Vendor Homepage: https://www.lexmark.com/enus.html Software Link: https://www.lexmark.com/enus.html Version: 2.27.4.0.39 Latest Version Tested on: Window...
nipper-ng 0.11.10 - Remote Buffer Overflow (PoC)
Exploit Title: nipper-ng 0.11.10 - Remote Buffer Overflow PoC Date: 2019-10-20 Exploit Author: Guy Levin https://blog.vastart.dev Vendor Homepage: https://tools.kali.org/reporting-tools/nipper-ng Software Link: https://code.google.com/archive/p/nipper-ng/source/default/source Version: 0.11.10...
HyperCam 5.5.1911.15 - XML External Entity Injection Vulnerability
Exploit Title: HyperCam 5.5.1911.15 - XML External Entity Injection Exploit Author : ZwX Exploit Date: 2019-11-16 Vendor Homepage : https://www.solveigmm.com/ Link Software : https://www.solveigmm.com/files/SolveigMMHyperCamHomeEdition55191115.exe Tested on OS: Windows 7 + Exploit : PoC...
Foscam Video Management System 1.1.4.9 - Username Denial of Service (PoC)
Foscam Video Management System 1.1.4.9 - Username Denial of Service PoC Exploit Title: Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service PoC Author: chuyreds Discovery Date: 2019-11-16 Vendor Homepage: https://www.foscam.es/ Software Link :...
Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal
Exploit Title: Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Google Dork: N/A Date: 2019-11-15 Exploit Author: Kevin Randall Vendor Homepage: https://www.lexmark.com/enus.html Software Link: https://www.lexmark.com/enus.html Version: 2.27.4.0.39 Latest Version Tested on: Windows Serv...
oXygen XML Editor 21.1.1 XML Injection
Exploit Title: oXygen XML Editor 21.1.1 - XML External Entity Injection Author: Pablo Santiago Date: 2019-11-13 Vendor Homepage: https://www.oxygenxml.com/ Source:https://www.oxygenxml.com/xmleditor/downloadoxygenxmleditor.html Version: 21.1.1 CVE : N/A Tested on: Windows 7 PoC 1- python -m...
Ubuntu shiftfs refcount Underflow / Type Confusion
Ubuntu: refcount underflow and type confusion in shiftfs Tested on Ubuntu 19.10, kernel "5.3.0-19-generic 20-Ubuntu". Ubuntu ships a filesystem "shiftfs" in fs/shiftfs.c in the kernel tree that doesn't exist upstream. This filesystem can be mounted from user namespaces, meaning that this is...
Bematech Printer MP-4200 - Denial of Service Vulnerability
Exploit Title: Bematech Printer MP-4200 - Denial of Service Exploit Author: Jonatas Fil Vendor Homepage: https://www.bematech.com.br/ Software Link: https://www.bematech.com.br/produto/mp-4200-th/ Version: MP-4200 TH Tested on: Windows and Linux CVE : N/A DoS Poc:...
eMerge E3 1.00-06 - Privilege Escalation Vulnerability
Exploit for hardware platform in category web applications Exploit Title: eMerge E3 1.00-06 - Privilege Escalation Exploit Author: LiquidWorm Vendor Homepage: http://linear-solutions.com/nscfamily/e3-series/ Software Link: http://linear-solutions.com/nscfamily/e3-series/ Version: 1.00-06 Tested o...
RISE Ultimate Project Manager 2.3 Cross Site Request Forgery
Exploit Title: RISE - Ultimate Project Manager v2.3 - Cross-Site Request Forgery Add Admin Date: 11-11-2019 Exploit Author: Ismail Tasdelen Vendor Homepage: http://fairsketch.com/ Software Link : https://codecanyon.net/item/rise-ultimate-project-manager/15455641 Software : RISE - Ultimate Project...
Ubuntu ubuntu-aufs-modified mmap_region() Refcounting Issue
Ubuntu: ubuntu-aufs-modified mmapregion breaks refcounting in overlayfs/shiftfs error path Tested on 19.10. Ubuntu's aufs kernel patch includes the following change which I interestingly can't see in the AUFS code at https://github.com/sfjro/aufs5-linux/blob/master/mm/mmap.c:...
Exploit for Out-of-bounds Write in Php
Ladon POC Moudle CVE-2019-11043 PHP-FPM + Ngnix Vulner...
iOS IOUSBDeviceFamily 12.4.1 - IOInterruptEventSource Heap Corruption (PoC)
iOS IOUSBDeviceFamily 12.4.1 - IOInterruptEventSource Heap Corruption PoC Exploit Title: iOS IOUSBDeviceFamily 12.4.1 - 'IOInterruptEventSource' Heap Corruption PoC Date: 2019-10-29 Exploit Author: Sem Voigtlander, Joshua Hill and Raz Mashat Vendor Homepage: https://apple.com/ Software Link:...
U.S. Dept Of Defense: CORS Misconfiguration Leads to Exposing User Data
Vulnerable Asset: https://██████/█████████/ Discovery: - Upon accessing the site we discover two specific response headers which indicates that a cross-domain request for sensitive information might be possible 1. Access-Control-Allow-Origin: injectable 2. Access-Control-Allow-Credentials: true -...
Safe SVG < 1.9.6 - XSS Protection Bypass
By using entities in payload XSS will success to bypass the protection of the Safe SVG Plugin Video POC for Video PoC for v1.9.5 : https://www.youtube.com/watch?v=hnQA2hc-4k...
Safe SVG < 1.9.6 - XSS Protection Bypass
By using entities in payload XSS will success to bypass the protection of the Safe SVG Plugin PoC Video POC for Video PoC for v1.9.5 : https://www.youtube.com/watch?v=hnQA2hc-4k...