Adobe Captivate Remote Code Execution Vulnerability

Adobe Captivate is a rapid response authoring tool for creating eLearning content such as software demos, software simulations, branching scenarios and randomized quizzes in .swf and HTML5 formats. A remote code execution vulnerability exists in the quiz reporting feature of Adobe Captivate, whic...

CVE-2017-3098

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

Information disclosure

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

CVE-2017-3087

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

Remote code execution

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

CVE-2017-3087

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

CVE-2017-3098

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

CVE-2017-3087

Adobe Captivate

CVE-2017-3087

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

CVE-2017-3098

Adobe Captivate

CVE-2017-3098

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

hape.uclip.mobi XSS vulnerability

Open Bug Bounty ID: OBB-250068 Description| Value ---|--- Affected Website:| hape.uclip.mobi Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Kibana Reporting Plugin Cross-Site Request Forgery Vulnerability

Kibana is an open source data visualization plugin for Elasticsearch. A cross-site request forgery vulnerability exists in the Kibana Reporting plugin, which allows an attacker to generate redundant reports by tricking authenticated Kibana users into visiting specially designed pages...

SigPloit - Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP

SiGploit a signaling security testing framework dedicated to Telecom Security professionals and reasearchers to pentest and exploit vulnerabilites in the signaling protocols used in mobile operators regardless of the geneartion being in use. SiGploit aims to cover all used protocols used in the...

CVE-2016-1000218

Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page...

CVE-2016-1000218

Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page...

Cross site request forgery (csrf)

Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page...

CVE-2016-1000218

Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page...

CVE-2016-1000218

The connected documents indicate a CSRF vulnerability in Elastic Kibana Reporting plugin for Kibana, version 2.4.0. The issue allows an authenticated user to trigger generation of redundant reports when visiting a specially crafted page. The root cause is a CSRF weakness in the Reporting plugin; ...

Metasploit Wrapup

A fresh, new UAC bypass module for Windows 10! Leveraging the behavior of fodhelper.exe and a writable registry key as a normal user, you too can be admin! Unpatched as of last week, this bypass module works on Windows 10 only, but it works like a charm! Reach out and allocate something This...