576 matches found
CVE-2018-11715
The Recent Threads plugin before 1.1 for MyBB allows XSS via a thread subject...
Apple iOS Magnifier Permission Vulnerability
Apple iOS is an operating system developed by Apple for mobile devices, and Magnifier is one of the screen magnification components. A security vulnerability exists in the Magnifier component in Apple iOS versions prior to 11.4. An attacker in close physical proximity could exploit this...
CVE-2013-1625
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/titanftpadminpwd.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:14+00:00| seen|...
CVE-2018-10562
creationtimestamp| type| source ---|---|--- 2018-05-10 10:42:33+00:00| seen| MISP/5af412ea-4254-4668-b1ea-44bc950d210f 2018-05-11 16:06:05+00:00| exploited| https://t.me/canyoupwnme/3749 2018-06-18 09:04:20+00:00| seen| MISP/5b2774da-6bb4-46c0-8483-43e102de0b81 2020-01-08 13:22:45+00:00| seen|...
The Recent Apps in the Start Menu are Not Displayed by the Citrix Receiver
The recent apps in the start menu are not displayed by the Citrix Receiver. Only the recent apps from a local app or shortcuts from GPO’s are shown. The registry key values are saved but are not displayed. If the users have icons in the start menu from a second worker group, the keys are created ...
Word Attachment Delivers FormBook Malware, No Macros Required
A new wave of document attacks targeting inboxes do not require enabling macros in order for adversaries to trigger an infection chain that ultimately delivers FormBook malware. Researchers at Menlo Security are reporting a wave of attacks that began last month that are targeting financial and...
MyBB Plugin Recent Threads On Index - Cross-Site Scripting
MyBB Plugin Recent Threads On Index - Cross-Site Scripting Exploit Title: MyBB Recent threads Date: 4th April 2018 Exploit Author: Perileos Software Link: https://community.mybb.com/mods.php?action=view&pid=191 Version: 17.0 Tested on: Windows 10 1. Description: This plugin shows recent threads i...
MyBB Recent Threads On Index 17.0 Cross Site Scripting
Exploit Title: MyBB Recent threads Date: 4th April 2018 Exploit Author: Perileos Software Link: https://community.mybb.com/mods.php?action=view&pid=191 Version: 17.0 Tested on: Windows 10 1. Description: This plugin shows recent threads in the side bar on your MyBB forum. 2. Proof of concept:...
MyBB Plugin Recent Threads On Index - Cross-Site Scripting
Exploit Title: MyBB Recent threads Date: 4th April 2018 Exploit Author: Perileos Software Link: https://community.mybb.com/mods.php?action=view&pid=191 Version: 17.0 Tested on: Windows 10 1. Description: This plugin shows recent threads in the side bar on your MyBB forum. 2. Proof of concept:...
MyBB Recent Threads On Index Plugin - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: MyBB Recent threads Exploit Author: Perileos Software Link: https://community.mybb.com/mods.php?action=view&pid=191 Version: 17.0 Tested on: Windows 10 1. Description: This plugin shows recent threads in the side bar on your MyB...
Microsoft Office Vulnerabilities Used to Distribute Zyklon Malware in Recent Campaign
Introduction FireEye researchers recently observed threat actors leveraging relatively new vulnerabilities in Microsoft Office to spread Zyklon HTTP malware. Zyklon has been observed in the wild since early 2016 and provides myriad sophisticated capabilities. Zyklon is a publicly available,...
Security Vulnerability in Apple's HomeKit
The story of the recent vulnerability in Apple's HomeKit...
The Time Has Arrived to Embrace Hackers
BOSTON—More than ever, hackers are getting a welcoming embrace from law enforcement, governments and business. Bug bounties and vulnerability disclosure programs are becoming the norm across industry, and hackers are no longer universally viewed as a pariah. Simultaneously, however, groups such a...
CVE-2017-7576
DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials such as the username of energetic and password of wireless meant to allow the vendor to access the devices. These credentials can be used in the web interface or by connecting to the device via TELNET. This is fixed in...
shopify-scripts: Null pointer dereferences in ary_concat
@ssarong reported a null pointer dereference in MRuby: https://github.com/mruby/mruby/issues/3532 The issue was corrected in https://github.com/mruby/mruby/commit/d35fcf1ea2bfc3933b2f2543265874669feeee95...
Open Databases a Juicy Extortion Target
Recent attacks against insecure MongoDB, Hadoop and CouchDB installations represent a new phase in online extortion, born from ransomware’s roots with the promise of becoming a nemesis for years to come. “These types of attacks have grown from ones of opportunity to full-scale automated and...
U.S. Dept Of Defense: Open FTP server on a DoD system
Summary: I don't know if this qualifies but during my search I discovered an open FTP panel that I was able to successfully log into. Using any FTP program, I used File zilla and then entered ████ as my host then connected. Then I was able to look through any of the files. I noticed the last...
packers.com XSS vulnerability
Vulnerable URL: http://www.packers.com/media-center/recent-podcast.html?month="-alertOPENBUGBOUNTY-" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22776 VIP website status:| Yes...
Wordpress recent-backups plugin file download vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. recent-backups is one of the version of the back plugin. A file download vulnerability exists in version v0.7 of the Wordpress recent-backups plugin, which can be exploited by remote...
