LfSoOxxBtKDnFHl

A Remote Browser's Agent XSS is a piece of software that allows a remote "operator" to control a browser as if he has physical access to that system. While desktop sharing and remote administration have many legal uses, "XSS" software is usually associated with criminal or malicious activity...

Faulty Firmware Auto-Update Breaks Hundreds of 'Smart Locks'

More features, more problems! Today, we are living in a digital age that is creating a digital headache for people by connecting every other unnecessary home appliance to the Internet. Last week, nearly hundreds of Internet-connected locks became inoperable after a faulty software update hit some...

How Just Opening A Malicious PowerPoint File Could Compromise Your PC

A few months back we reported how opening a simple MS Word file could compromise your computer using a critical vulnerability in Microsoft Office. The Microsoft Office remote code execution vulnerability CVE-2017-0199 resided in the Windows Object Linking and Embedding OLE interface for which a...

CVE-2017-10815

MaLion for Windows 5.2.1 and earlier only when "Remote Control" is installed and MaLion for Mac 4.0.1 to 5.2.1 only when "Remote Control" is installed allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent...

Authentication flaw

MaLion for Windows 5.2.1 and earlier only when "Remote Control" is installed and MaLion for Mac 4.0.1 to 5.2.1 only when "Remote Control" is installed allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent...

CVE-2017-10815

MaLion for Windows 5.2.1 and earlier only when "Remote Control" is installed and MaLion for Mac 4.0.1 to 5.2.1 only when "Remote Control" is installed allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent...

CVE-2017-10815

MaLion for Windows 5.2.1 and earlier only when "Remote Control" is installed and MaLion for Mac 4.0.1 to 5.2.1 only when "Remote Control" is installed allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent...

Siemens 300/400 Series PLC Remote Control Vulnerability

Programmable controller PLC is developed on the basis of relay control and computer control, and gradually developed into a new type of industrial automatic control device based on microprocessor and integrating modern technologies such as computer technology, automatic control technology and...

Design/Logic Flaw

The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs...

DiskBoss Enterprise 8.2.14 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/env python Exploit Title: DiskBoss Enterprise v8.2.14 Remote buffer overflow Date: 2017-07-30 Exploit Author: Ahmad Mahfouz Author Homepage: www.unixawy.com Vendor Homepage: http://www.diskboss.com/ Software Link:...

The Segway miniPRO balance of the car vulnerability research-exploit warning-the black bar safety net

Segway miniPRO Electric balance car presence of a critical security vulnerability, a malicious attacker could exploit the vulnerability may completely control the balance of the car. IOActive latest study found that Segway miniPRO Electric balance of the car in the presence of a critical security...

Bad Code Library Triggers Devil's Ivy Vulnerability in Millions of IoT Devices

Tens of millions of products ranging from airport surveillance cameras, sensors, networking equipment and IoT devices are vulnerable to a flaw that allows attackers to remotely gain control over devices or crash them. The vulnerability, dubbed Devil’s Ivy, was identified by ​researchers at Senrio...

Hackers Could Easily Take Remote Control of Your Segway Hoverboards

If you are hoverboard rider, you should be concerned about yourself. Thomas Kilbride, a security researcher from security firm IOActive, have discovered several critical vulnerabilities in Segway Ninebot miniPRO that could be exploited by hackers to remotely take "full control" over the hoverboar...

CHAOS Framework - Generate Payloads and Control Remote Machines

CHAOS Framework allows generate payloads and controls remote machines. DISCLAIMER The use of the CHAOS Framework is COMPLETE RESPONSIBILITY of the END-USER. Developer assumes NO liability and is NOT responsible for any misuse or damage caused by this program. FEATURES Windows Remote Control...

Weak Password Vulnerability in DebugShell of Various ZTE OLT PON Devices

ZTE OLT C200, C220, C300, and C320 are key PON devices used in optical switching networks in the telecommunications industry. A weak password vulnerability exists in DebugShell of various ZTE OLT PON devices, which can be exploited by an attacker to add passwords for daily operation accounts,...

Katyusha Scanner — Telegram-based Fully Automated SQL Injection Tool

A new powerful hacking tool recently introduced in an underground forum is making rounds these days, allowing anyone to rapidly conduct website scans for SQL injection flaws on a massive scale — all controlled from a smartphone using the Telegram messaging application. Dubbed Katyusha Scanner, th...

Microsoft Teams help & learning

None None...

Moxa AWK-3131A Wireless Access Point Operating System Command Injection Vulnerability

Moxa AWK-3131A Wireless Access Point is a wireless switch from Moxa China. An operating system command injection vulnerability exists in the web application 'ping' function in Moxa AWK-3131A Wireless Access Points using firmware version 1.1. A remote attacker could exploit this vulnerability to...

Car Backdoor Maker: CBM

Car Backdoor Maker For the first time, a hardware backdoor tool is presented having several advanced features, such as: remote control via SMS commands, automated launch of attack payloads at a GPS location or when a specific car status is reached; and a configuration interface that allows users ...

UBUNTU-CVE-2016-10376

Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions...