Moxa UC-7408 Firmware Rewrite Vulnerability

Moxa UC-7408 is an embedded industrial computer product from Moxa. A firmware rewrite vulnerability exists in the Moxa UC-7408 that originates from a program failing to perform authentication of critical functions. A remote attacker can exploit this vulnerability to cause an unrecoverable firmwar...

NetScaler Cheat Sheets for XenMobile Integration

The purpose of these NetScaler cheat sheets is to provide a reference article with key information about each Session Policy or Session Profile configured via NetScaler / XenMobile wizard. These cheat sheets are applicable for XenMobile 9 and 10.x solutions. STWBRWIPAddress Clientless Access...

Informatica: [marketplace.informatica.com] Open Redirect

marketplace.informatica.com contains an open redirect due to a flawed URL rewrite rule. All requests containing a single quote: ' are met with a 302 redirect to the same URL, minus the single quote. As the Location header uses a protocol-relative URL, this can be abused to redirect people to...

Katie Moussouris on the Latest Wassenaar Arrangement Rules

Threatpost editor Mike Mimoso talks to HackerOne chief policy officer Katie Moussouris about the U.S. implementation of the Wassenaar Arrangement rules and where things stand close to seven months after the initial draft was pulled off the table for a rewrite...

ziggystartux

ziggystartux A Kaiten rewrite, with much new functionality, an...

FreeBSD Elevation of Privilege Vulnerability

FreeBSD is a Unix-like operating system. An elevation of privilege vulnerability exists in FreeBSD, which can be exploited by an attacker to elevate privileges or launch a denial of service attack due to an access control error in the rewrite of a random memory field when using Linux setgroups2...

openSUSE: Security Advisory for roundcubemail (openSUSE-SU-2016:0214-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BookingeCMS HotelCMS酒店预订管理系统rewrite参数SQL注入

0x01 漏洞简述 提交时间： 2015-09-04 13:33 公开时间： 2015-12-06 09:00 漏洞类型： SQL注射漏洞 珠海中新信息科技有限公司开发的BookingeCMS HotelCMS /?m=info&rewrite=1 文件rewrite参数存在注入 0x02 漏洞利用 测试Payload: （get提交） ?m=info&rewrite=1' UNION ALL SELECT CONCAT0x7c,IFNULLCASTCURRENTUSER AS CHAR,0x20,0x7c,NULL%23 0x03 参考链接...

Kaspersky Antivirus Certificate Handling Directory Traversal Vulnerability

Kaspersky Antivirus is an antivirus program from Kaspersky Labs. Kaspersky Antivirus suffers from a certificate handling directory traversal vulnerability. This allows remote attackers to exploit a directory traversal sequence '... /' to rewrite arbitrary files in the context of the program...

Apple iOS CFNetwork cookie rewriting vulnerability

iOS is an operating system developed by Apple for mobile devices. A rewrite vulnerability exists in the Apple iOS CFNetwork cookie. An attacker can exploit this vulnerability to rewrite cookie values via a remote web server...

TeamSpeak Client 3.0.18.1 RFI / Traversal / Code Execution

Exploit Title: "PwnSpeak" a 0day Exploit for TeamSpeak Client / 0x6FB30B11 my pgp keyid Vendor Homepage: https://www.teamspeak.com/ Application: TeamSpeak 3 Version: TeamSpeak3 Client 3.0.0 - 3.0.18.1 Platforms: Windows, Mac OS X and Linux Exploitation: Remote Risk : Very High ========= The Bug...

TeamSpeak Client <= 3.0.18.1 - RFI to RCE Exploit

Exploit for windows platform in category remote exploits Exploit Title: "PwnSpeak" a 0day Exploit for TeamSpeak Client / 0x6FB30B11 my pgp keyid Vendor Homepage: https://www.teamspeak.com/ Application: TeamSpeak 3 Version: TeamSpeak3 Client 3.0.0 - 3.0.18.1 Platforms: Windows, Mac OS X and Linux...

TeamSpeak Client 3.0.18.1 - Remote File Inclusion Remote Code Execution

TeamSpeak Client 3.0.18.1 - Remote File Inclusion Remote Code Execution Exploit Title: "PwnSpeak" a 0day Exploit for TeamSpeak Client / 0x6FB30B11 my pgp keyid Vendor Homepage: https://www.teamspeak.com/ Application: TeamSpeak 3 Version: TeamSpeak3 Client 3.0.0 - 3.0.18.1 Platforms: Windows, Mac ...

TeamSpeak Client 3.0.18.1 - Remote File Inclusion / Remote Code Execution

Exploit Title: "PwnSpeak" a 0day Exploit for TeamSpeak Client / 0x6FB30B11 my pgp keyid Vendor Homepage: https://www.teamspeak.com/ Application: TeamSpeak 3 Version: TeamSpeak3 Client 3.0.0 - 3.0.18.1 Platforms: Windows, Mac OS X and Linux Exploitation: Remote Risk : Very High ========= The Bug...

Oracle: Security Advisory (ELSA-2008-0612)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Upload pictures of the shell to bypass the filter of several methods-vulnerability warning-the black bar safety net

General site picture upload function to the file filter, to prevent webshell written. But the different procedures of the filter are not the same, how to break through the filter to continue to upload? This article summarizes seven methods that can break! 1, The file header+GIF89a law. （php//this...

CMS Contenido 4.9.5 Cross Site Scripting

Advisory: Reflecting XSS Vulnerability in CMS Contenido 4.9.x-4.9.5 Advisory ID: SROEADV-2014-03 Author: Steffen Rösemann Affected Software: CMS Contenido 4.9.x-4.9.5 Release: 10th Dec 2014 Vendor URL: http://www.contenido.org/de/ Vendor Status: fixed CVE-ID: - ==========================...

OracleVM 3.1 : xen (OVMSA-2013-0001)

The remote OracleVM system is missing necessary patches to address critical security updates : - VT-d: fix interrupt remapping source validation for devices behind legacy bridges Using SVTVERIFYBUS here doesn't make sense native Linux also uses SVTVERIFYSIDSQ here instead. CVE-2012-5634 - When xe...

Joomla! Component com_hdflvplayer 2.1.0.1 - SQL Injection

Joomla! Component comhdflvplayer 2.1.0.1 - SQL Injection !/usr/bin/python Exploit Title : Joomla HD FLV 2.1.0.1 and below SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1:...

Omeka 2.2.1 - Remote Code Execution Exploit

Exploit for php platform in category remote exploits !/usr/bin/env python Omeka 2.2.1 Remote Code Execution Exploit Vendor: Omeka Team CHNM GMU Product web page: http://www.omeka.org Affected version: 2.2.1 and 2.2 Summary: Omeka is a free, flexible, and open source web-publishing platform for th...