CVE-2019-15520

CVE-2019-15520 concerns the Python-based dependency manager comelz Quark . Multiple connected sources confirm a vulnerability in versions of Quark before 2019-03-26 that allows a directory traversal to locations outside the project directory. The root cause is a path traversal flaw in Quark’s han...

PT-2019-14242

Name of the Vulnerable Software and Affected Versions comelz Quark versions prior to 2019-03-26 Description The issue allows directory traversal to locations outside of the project directory. Recommendations For versions prior to 2019-03-26, update to a version released after 2019-03-26 to resolv...

CVE-2019-15520: Improper Limitation of a Pathname to a Restricted Directory

comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory...

Orbit v2.0 - Blockchain Transactions Investigation Tool

Introduction Orbit is designed to explore network of a blockchain wallet by recursively crawling through transaction history. The data is rendered as a graph to reveal major sources, sinks and suspicious connections. Note: Orbit only runs on Python 3.2 and above. Usage Let's start by crawling...

BCN Quark Quarking Password Manager Clickjacking Vulnerability

BCN Quark Quarking Password Manager is a password management tool. A clickjacking vulnerability exists in BCN Quark Quarking Password Manager version 3.1.84. The vulnerability arises from a network system or product that does not properly validate incoming data. An attacker could exploit this...

Design/Logic Flaw

BCN Quark Quarking Password Manager 3.1.84 suffers from a clickjacking vulnerability caused by allowing within webaccessibleresources. An attacker can take advantage of this vulnerability and cause significant harm...

CVE-2019-12880

BCN Quark Quarking Password Manager 3.1.84 suffers from a clickjacking vulnerability caused by allowing within webaccessibleresources. An attacker can take advantage of this vulnerability and cause significant harm...

CVE-2019-12880

CVE-2019-12880 affects BCN Quark Quarking Password Manager (v3.1.84). The issue is a clickjacking vulnerability caused by allowing a wildcard (*) in web_accessible_resources, enabling a malicious page to load the password manager UI in a framed context. This could allow attackers to trick users i...

CVE-2019-12880: Improper Restriction of Rendered UI Layers or Frames

BCN Quark Quarking Password Manager 3.1.84 suffers from a clickjacking vulnerability caused by allowing within webaccessibleresources. An attacker can take advantage of this vulnerability and cause significant harm...

PT-2019-12997

Name of the Vulnerable Software and Affected Versions BCN Quark Quarking Password Manager version 3.1.84 Description The issue is caused by allowing within web accessible resources, which leads to a clickjacking vulnerability. An attacker can exploit this to cause significant harm. Recommendation...

Orbit - Cryptocurrency Wallets Relationship Visualizer

Give it a blockchain based crypto wallet address and it will crawl 3 levels deep in transaction data to plot a graph out of the information. Usage Run orbit.py with python3 as follows python3 orbit.py Enter the wallet address | | | ' | || | | | | Enter a wallet address: xxxxxxxxxxxxxxx Now orbit...

Top Quark Architecture 2.1.0 - lib/js/fancyupload/showcase/batch/script.php File Upload PHP Code Execution

The Top Quark Architecture WordPress plugin was affected by a lib/js/fancyupload/showcase/batch/script.php File Upload PHP Code Execution security vulnerability...

Wordpress Top Quark Architecture 2.10 - Arbitrary File Upload Vulnerability

No description provided by source. Exploit Title: Wordpress Top Quark Architecture Version 2.10 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/topquark/lib/js/fancyupload/showcase/batch/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://topquark.com/ Software...

Quark Chat 1.0 XSS / SQL Injection / Path Disclosure

Exploit Title: Quark Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.quack-chat.com/ Tested on: Win8 & Linux Mint Affected Version : 1.0 Contacts: https://twitter.com/Dylanirzi11...

WordPress Top Quark Architecture 2.10 Shell Upload

Exploit Title: Wordpress Top Quark Architecture Version 2.10 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/topquark/lib/js/fancyupload/showcase/batch/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://topquark.com/ Software Link:...

WordPress Top Quark Architecture Plugin 2.10 - Arbitrary File Upload

Top Quark Architecture plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also...

Wordpress Top Quark Architecture Version 2.10 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Top Quark Architecture Version 2.10 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/topquark/lib/js/fancyupload/showcase/batch/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage:...

WordPress Plugin Top Quark Architecture 2.10 - Arbitrary File Upload

WordPress Plugin Top Quark Architecture 2.10 - Arbitrary File Upload Exploit Title: Wordpress Top Quark Architecture Version 2.10 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/topquark/lib/js/fancyupload/showcase/batch/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage...

WordPress Plugin Top Quark Architecture 2.10 - Arbitrary File Upload

Exploit Title: Wordpress Top Quark Architecture Version 2.10 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/topquark/lib/js/fancyupload/showcase/batch/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://topquark.com/ Software Link:...