CVE-2024-51304

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ldapsearchdn function...

389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c

An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service...

Pipe Finder - Automated script to search in SMB protocol for availables pipe names

Automated script to search in SMB protocol for availables pipe names. Requirements metasploit-framework wget pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run How to Run git clone https://github.com/peterpt/pipefinder.git cd pipefinder && ./pipef...

data.pointblue.org XSS vulnerability

Open Bug Bounty ID: OBB-257248 Description| Value ---|--- Affected Website:| data.pointblue.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...