openITCOCKPIT 3.6.1-2 Cross Site Request Forgery

Exploit Title: openITCOCKPIT 3.6.1-2 - CSRF 2 RCE Google Dork: N/A Date: 26-08-2019 Exploit Author: Julian Rittweger Vendor Homepage: https://openitcockpit.io/ Software Link: https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.6.1-2 Fixed in: 3.7.1 |...

openITCOCKPIT 3.6.1-2 - Cross-Site Request Forgery

Exploit Title: openITCOCKPIT 3.6.1-2 - CSRF 2 RCE Google Dork: N/A Date: 26-08-2019 Exploit Author: Julian Rittweger Vendor Homepage: https://openitcockpit.io/ Software Link: https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.6.1-2 Fixed in: 3.7.1 |...

Realtek Managed Switch Controller RTL83xx Stack Overflow

SOT Subject Realtek Managed Switch Controller RTL83xx PoC 2019 bashis https://www.realtek.com/en/products/communications-network-ics/category/managed-switch-controller Brief description 1. Boa/Hydra suffer of exploitable stack overflow with a 'one byte read-write loop' w/o boundary check. all FW...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

PYSEC-2019-19

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

PYSEC-2019-89

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

Design/Logic Flaw

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

UBUNTU-CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

CVE-2019-15486

The CVE-2019-15486 entry affects django-js-reverse (Django JS Reverse) versions prior to 0.9.1. The vulnerability is an XSS flaw exploitable via js_reverse_inline, as stated across multiple sources in the provided documents. The root cause is exposed by the description “before 0.9.1 has XSS via j...

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

[SECURITY] Fedora 30 Update: nginx-1.16.1-1.fc30

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...

OpenSSH < 3.6.2 Reverse DNS Lookup Bypass

Binary data 701171.prm...

Buffer overflow

An issue was discovered in the Texas Instruments TI TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only-Memory XOM implementation prevents code read-outs on protected memory by generating bus faults. However, single-stepping and using breakpoints is allowed in XOM-protected flash...

CVE-2018-18056

An issue was discovered in the Texas Instruments TI TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only-Memory XOM implementation prevents code read-outs on protected memory by generating bus faults. However, single-stepping and using breakpoints is allowed in XOM-protected flash...

CVE-2018-18056

The CVE-2018-18056 entry concerns TI TM4C, MSP432E and MSP432P microcontroller series. The issue stems from the eXecute-Only-Memory (XOM) implementation, which prevents code reads on protected memory by using bus faults, yet allows single-step/breakpoint use in XOM-protected flash. This enables a...

Linux/MIPS64 - Reverse (localhost:4444/TCP) Shell Shellcode (157 bytes)

/ Reverse shell shellcode for Linux MIPS64 mips64el Default port: tcp/4444 Host: localhost Date: August 19 - 2019 Author: Antonio de la Piedra Tested on: MIPS Malta - Linux debian-mips64el 4.9.0-3-5kc-malta Size: 157 bytes Compile with: gcc -fno-stack-protector -z execstack main.c -o main -g /...

URL Path Traversal in Jira Service Desk Server and Jira Service Desk Data Center Allows Information Disclosure - CVE-2019-14994

A URL path traversal vulnerability in Jira Service Desk Server and Jira Service Desk Data Center allows a remote attacker with portal access to view all issues from all projects in the affected instance. This could include Jira Service Desk projects, Jira Core projects, and Jira Software projects...

Linux/x86_64 - Reverse Shell (/bin/sh) with Configurable Password Shellcode (120 bytes)

/ ; Title : Linux/x8664 - Reverse Shell /bin/sh with Password configurable 120 bytes ; Date : 2019-08-18 ; Author : Gonçalo Ribeiro @goncalor ; Website : goncalor.com ; SLAE64-ID : 1635 global start %define pass "pass" %define port 0x5c11 ; htons4444 start: jmp realstart password: db pass passlen...