11989 matches found
WAGO PFC200 Cloud Connectivity TimeoutPrepared Command Injection Vulnerability
Summary An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200. An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command. Tested Versions WAGO PFC200 Firmware version...
Let's Encrypt Vulnerability
The BBC is reporting a vulnerability in the Let's Encrypt certificate service: In a notification email to its clients, the organisation said: "We recently discovered a bug in the Let's Encrypt certificate authority code. "Unfortunately, this means we need to revoke the certificates that were...
medanta.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1109584 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
DoppelPaymer Ransomware Used to Steal Data from Supplier to SpaceX, Tesla
A company that provides custom parts to aerospace giants Lockheed Martin, SpaceX and Boeing, has been the target of an attack by an emerging type of ransomware that can both encrypt files and exfiltrate data. Colorado-based Visser Precision said it was targeted by a “cyber incident” that involved...
human-capital.com.ua Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1109034 Security Researcher geeknik Helped patch 8949 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting human-capital.com.ua websi...
netkit-telnet-0.17 telnetd (Fedora 31) - BraveStarr Remote Code Execution
netkit-telnet-0.17 telnetd Fedora 31 - BraveStarr Remote Code Execution !/usr/bin/env python3 BraveStarr ========== Proof of Concept remote exploit against Fedora 31 netkit-telnet-0.17 telnetd. This is for demonstration purposes only. It has by no means been engineered to be reliable: 0xff bytes ...
Wing FTP Server 6.2.3 Privilege Escalation
Exploit Title: Wing FTP Server 6.2.3 - Privilege Escalation Google Dork: intitle:"Wing FTP Server - Web" Date: 2020-03-02 Exploit Author: Cary Hooper Vendor Homepage: https://www.wftpserver.com Software Link: https://www.wftpserver.com/download/wftpserver-linux-64bit.tar.gz Version: v6.2.3 Tested...
news.red-rock-group.com Cross Site Scripting vulnerability
Security Researcher 4NCURZE Helped patch 1397 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting news.red-rock-group.com website and its users. Following...
Wifi-Hacker - Shell Script For Attacking Wireless Connections Using Built-In Kali Tools
Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities WEP, WPS, WPA, WPA2...
Apache Tomcat AJP Ghostcat File Read / Inclusion
!/usr/bin/env python CNVD-2020-10487 Tomcat-Ajp lfi by ydhcui import struct Some references: https://tomcat.apache.org/connectors-doc/ajp/ajpv13a.html def packstrings: if s is None: return struct.pack"h", -1 l = lens return struct.pack"H%dsb" % l, l, s.encode'utf8', 0 def unpackstream, fmt: size ...
bestgenetics.at Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1102817 Security Researcher Broly157 Helped patch 1609 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting bestgenetics.at website a...
osquery:osqueryfuzz-sqlquery: Heap-use-after-free in binCollFunc
Project: https://github.com/osquery/osquery.git Detailed Report: https://oss-fuzz.com/testcase?key=5174631483047936 Project: osquery Fuzzing Engine: libFuzzer Fuzz Target: osqueryfuzz-sqlquery Job Type: libfuzzerasanosquery Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...
hotelmahogany.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1100662 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting hotelmahogany.com website...
tritecnica.it Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1098925 Security Researcher Zodx Helped patch 35 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting tritecnica.it website and its users. Following coordinated...
thestakeclub.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1098822 Security Researcher N00bSdt Helped patch 123 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting thestakeclub.com website and its users. Following...
optivisionbrasil.com.br Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8562 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting optivisionbrasil.com.br website and its users. Following...
e-kablo.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1095470 Security Researcher geeknik Helped patch 8675 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting e-kablo.com website and it...
Node.js: Slowloris, body parsing
Summary: add summary of the vulnerability Attackers can cause a Denial of Service by sending HTTP request body data extremely slowly to keep a connection open by maintaining activity, and use resources over an extended period. Description: add more details about this vulnerability Body data is se...
WordPress WP Sitemap Page 1.6.2 Cross Site Scripting
Exploit Title: WordPress Plugin WP Sitemap Page 1.6.2 - Persistent Cross-Site Scripting Dork:N/A Date: 2020-02-17 Exploit Author: UltraSecurityTeam Team Member = Ashkan Moghaddas , AmirMohammad Safari , Behzad khalife , Milad Ranjbar Vendor Homepage: UltraSec.Org Software Link:...