Android Screen Capture

This module takes a screenshot of the target phone. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Android Screen Capture', 'Description' = %q This module takes a screenshot of the target phon...

Hippo CMS 7.9.7 Enterprise Edition CRLF Injection

Affected software: hippo cms Type of vulnerability:crlf URL:https://cms.demo.onehippo.com Discovered by: provensec Website: provensec.com version: CMS 7.9.7 Enterprise Edition Proof of concept payload : advanced%0d%0aContent-Length:%200%0d%0a%0d%0aHTTP/1.1%20200%20OK%0d%0aContent-...

Mapbox: Stored xss in editor

On March 28th, 2015 @sahilsaif reported an issue with stored XSS in Mapbox Editor www.mapbox.com/editor. We deployed a fix for this issue on March 30th, 2015. On March 28th, 2015, I found a Stored XSS in Mapbox Editor. Which was hosted on https://mapbox.com/editor Mapbox Editor is now deprecated...

Threat Outbreak Alert RuleID14002: Email Messages Distributing Malicious Software on March 15, 2015

Medium Alert ID: 37867 First Published: 2015 March 16 13:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14002 may contain the following files: Name | Si...

GNOME Shell security, bug fix, and enhancement update

clutter 1.14.4-12 - Include upstream patch to prevent a crash when hitting hardware limits Resolves: rhbz1115162 1.14.4-11 - Fix a typo in the Requires 1.14.4-10 - Add patch for quadbuffer stereo suppport Resolves: rhbz1108891 cogl 1.14.1-6 - Add patches for quadbuffer stereo suppport Resolves:...

Collabtive 2.0 Cross Site Scripting

Affected software: collabtive Type of vulnerability: stored xss URL: http://www.collabtive.o-dyn.de/ Discovered by: Provensec Website: http://www.provensec.com Description: collabtive stored xss version:2.0 Proof of concept goto Collabtive add new project with xss payload and save it javascript...

Magento Server MAGMI Plugin - Multiple Vulnerabilities

Exploit Title: Magento Server MAGMI Plugin Local File Inclusion And Cross Site Scripting Software Link: http://sourceforge.net/projects/magmi/ Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 5-2-2015 ExploitLocal file inclusion :...

WebGUI 7.10.29 Cross Site Scripting

Exploit Title: WebGUI 7.10.29 stable version Cross site scripting vulnerability Software Link: http://www.webgui.org/download Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 17-1-2015 Version: 7.10.29. Previous version maybe vulnerable also. Vulnerable area:...

SPARTA - Network Infrastructure Penetration Testing Tool

SPARTA is a python GUI application which simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It allows the tester to save time by having point-and-click access to his toolkit and by displaying all tool output in a convenien...

WordPress Frontend Uploader 0.9.2 Cross Site Scripting

Exploit Title: Wordpress Frontend Uploader Cross Site ScriptingXSS Software Link: https://wordpress.org/plugins/frontend-uploader/ Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 27-12-2014 Version: 0.9.2 Exploit :...

JourneyMap 5.0.0RC2 Ultimate Edition - DoS

Exploit for multiple platform in category dos / poc Exploit Title: JourneyMap Disk-space consumption exploit Date: 23Nov2014 Exploit Author: CovertCodes Vendor Homepage: http://journeymap.techbrew.net/ Software Link: http://journeymap.techbrew.net/download/ Version: 5.0.0RC2 Ultimate Edition Test...

Updated gnome-shell and gnome-settings-daemon packages fix security vulnerability

The lock screen in gnome-shell does not disable taking screenshots via the Print Screen key, and several consecutive screenshot requests can trigger an out-of-memory situation, causing the lock screen to be killed, thus allowing it to be bypassed CVE-2014-7300...

MGASA-2014-0501 Updated gnome-shell and gnome-settings-daemon packages fix security vulnerability

The lock screen in gnome-shell does not disable taking screenshots via the Print Screen key, and several consecutive screenshot requests can trigger an out-of-memory situation, causing the lock screen to be killed, thus allowing it to be bypassed CVE-2014-7300...

JourneyMap 5.0.0RC2 Ultimate Edition - Resource Consumption (Denial of Service)

JourneyMap 5.0.0RC2 Ultimate Edition - Resource Consumption Denial of Service Exploit Title: JourneyMap Disk-space consumption exploit Date: 23Nov2014 Exploit Author: CovertCodes Vendor Homepage: http://journeymap.techbrew.net/ Software Link: http://journeymap.techbrew.net/download/ Version:...

JourneyMap 5.0.0RC2 Ultimate Edition - Resource Consumption (Denial of Service)

Exploit Title: JourneyMap Disk-space consumption exploit Date: 23Nov2014 Exploit Author: CovertCodes Vendor Homepage: http://journeymap.techbrew.net/ Software Link: http://journeymap.techbrew.net/download/ Version: 5.0.0RC2 Ultimate Edition Tested on: Linux JourneyMap...

Fedora 20 : gnome-shell-3.10.4-9.fc20 (2014-12690)

Security fix for lock screen circumvention by consecutive screenshot requests triggering OOM situation Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Radiant CMS Cross Site Scripting

Affected software: demo.radiantcms.org Discovered by: Provensec Website: http://www.provensec.com Author:Ankit Bharathan,Provensec Labs Type of vulnerability: XSS Stored Description: 1 Goto http://demo.radiantcms.org/admin/layouts 2 Add new layout with name as xss payload alert&40/1/&41 3 Save it...

screenFetch - The Bash Screenshot Information Tool

screenFetch is a "Bash Screenshot Information Tool". This handy Bash script can be used to generate one of those nifty terminal theme information + ASCII distribution logos you see in everyone's screenshots nowadays. It will auto-detect your distribution and display an ASCII version of that...

Joomla Artlinks Component <= 1.0b4 Remote Include Vulnerability

No description provided by source. .: insecurity research team :. ....:...:. . .:. | |/ :/ // :/ .:. : | | | \\ /\ / :. . ..: ||| / \ \ .: .:.. .. ./ .:/:. ./. .:/: . ...:. .advisory. .:... :..................: 18.o8.2oo6 .. Affected Application: Artlinks v1.0 Beta 4 Mambo/Joomla CMS...

Wordpress Spicy Blogroll Plugin - File Inclusion Vulnerability

No description provided by source. ?php // Title: Wordpress Plugin Spicy Blogroll File Inclusion Vulnerability // Date: 12-07-2013 GMT+8 Kuala Lumpur // Author: Ahlspiess // Greetz: All TBDIAN - http://w3.tbd.my : // Screenshot: http://i.imgur.com/jIrUznC.png / Details: File:...