47 matches found
Exploits
Exploits Collection of Exploits developed by Ron Jost For Exploit-development requests, please reach out to me: [email protected] Table of Contents: Wordpress Plugin XCloner 4.2.12 - Remote Code Execution Authenticated: CVE-2020-35948 Wordpress Plugin Modern Events Calendar Lite 5.16.5 - RCE...
Malicious code in do-wnload-available-38552-ron-sexsmith-38zcb-opsbmw (npm)
The package do-wnload-available-38552-ron-sexsmith-38zcb-opsbmw was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-ron (npm)
The package cash-app-money-generator-new-updated-2023-nhfy702r-ron was found to contain malicious code. --- Credit: OpenSSF source...
Fedora: Security Advisory (FEDORA-2025-1311e4cd58)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Senator Urges FTC Probe Into Microsoft After Ascension Ransomware Attack
US Senator Ron Wyden urges the FTC to investigate Microsoft after its software contributed to a major ransomware…...
MAL-2025-18549 Malicious code in do-wnload-available-38552-ron-sexsmith-38zcb-opsbmw (npm)
The package do-wnload-available-38552-ron-sexsmith-38zcb-opsbmw was found to contain malicious code...
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-ron (npm)
The package cash-app-money-generator-new-updated-2023-nhfy702r-ron was found to contain malicious code...
MAL-2025-10377 Malicious code in @zalastax/nolb-_ron (npm)
The package @zalastax/nolb-ron was found to contain malicious code...
Malicious code in do-wnload-available-38552-ron-sexsmith-38zcb-opsbmw (npm)
The package do-wnload-available-38552-ron-sexsmith-38zcb-opsbmw was found to contain malicious code...
Fedora 43 : python-uv-build / rust-gitui / rust-gstreamer / rust-ron / etc (2025-1311e4cd58)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-1311e4cd58 advisory. Update rust-ron to 0.9. Update rust-zip to 2.6.1, fixing GHSA-94vh-gphv-8pm8. Tenable has extracted the preceding description block directly from the Fedora...
[SECURITY] Fedora 40 Update: rust-ron-0.9.0-1.fc40
Rusty Object Notation...
Fedora 40 : python-pydantic-core / rust-adblock / rust-cookie_store / etc (2025-e923d51676)
The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-e923d51676 advisory. Update uv to 0.6.14, with various bugfixes and new features. Update rust-idna to 1.0.3 fixing RUSTSEC-2024-0421, rust-url to 2.5.4, rust- adblock to 0.9.6, a...
[SECURITY] Fedora 42 Update: rust-ron-0.9.0-1.fc42
Rusty Object Notation...
CVE-2024-51652
Cross-Site Request Forgery CSRF vulnerability in marckocher Skip To skip-to allows Stored XSS.This issue affects Skip To: from n/a through = 2.0.0...
CVE-2024-51652
CVE-2024-51652 : WordPress plugin Skip To is affected by a CSRF to Stored Cross-Site Scripting (XSS) vulnerability. The CVE description indicates a CSRF flaw that enables Stored XSS in Skip To versions n/a through 2.0.0. Connected sources substantiate the issue for the Skip To plugin and list the...
About the security content of Xcode 16
About the security content of Xcode 16 This document describes the security content of Xcode 16. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...
ron:from_str: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6472212835008512 Project: ron Fuzzing Engine: libFuzzer Fuzz Target: fromstr Job Type: libfuzzerasanron Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...
FCC Fines Major U.S. Wireless Carriers for Selling Customer Location Data
The U.S. Federal Communications Commission FCC today levied fines totaling nearly $200 million against the four major carriers -- including AT&T, Sprint, T-Mobile and Verizon -- for illegally sharing access to customers location information without consent. The fines mark the culmination of a mor...
Zimbra Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zimbra sudo + postfix privilege escalation', 'Description' = %q This module exploits a vulnerable sudo configuration that permits the zimbra user...
Zimbra zmslapd Privilege Escalation Exploit
This Metasploit module exploits CVE-2022-37393, which is a vulnerability in Zimbra's sudo configuration that permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zmslapd can load a user-defined configuration file, which...