Slack: a stored xss in slack integration https://onerror.slack.com/services/import

location of the stored xss bug : https://hunter22.slack.com/admin/name in team name :put this payload :" stored xss executed here: https://hunter22.slack.com/services/import...

cmseasy 最新版SQLl注入（第八次绕WAF）

简要描述： 继续绕啊绕啊 详细说明： cmseasy 终于更新了 看了下对比文件，那修复无法吐槽 function LiveMessage$a global $db; $sessionid = $SESSION'sessionid'; $name = addslasheshtmlspecialchars$a'name'; $email = addslasheshtmlspecialchars$a'email'; $country = htmlspecialchars$a'country'; $phone = htmlspecialchars$a'phone'; $departmentid...

CVE-2014-7056

CVE-2014-7056 affects the Android application “The Yeast Infection” (package com.wyeastinfectionapp) version 0.1. The issue is that the app does not verify X.509 certificates when connecting to SSL servers, which enables MITM attackers to spoof servers and potentially obtain sensitive information...

CVE-2014-7231

The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...

SUSE-SU-2015:0870-1 Security update for kvm

kvm has been updated to fix issues in the embedded qemu: CVE-2014-0223: An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could have used this flaw to corrupt QEMU process memory on the host...

CVE-2014-1829

Requests aka python-requests before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request...

Internet Explorer 11 Remote Code Execution 0day Exploit

The target of the attack focuses on IE 11 with Adobe Flash Player, on which the rest of the attack is coordinated. The security bug is a bug in use after free use-after-free that gives the attacker direct access to memory in an arbitrary direction, a corrupt file using Adobe Flash. Use-after-free...

unbreakable enterprise kernel security bug fix update

2.6.39-400.215.10 - auditsc: auditkrule mask accesses need bounds checking Andy Lutomirski Orabug: 19590597 CVE-2014-3917 2.6.39-400.215.9 - oracleasm: Add support for new error return codes from block/SCSI Martin K. Petersen Orabug: 18438934 2.6.39-400.215.8 - ibipoib: CSUM support in connected...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6.2 Advanced Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which...

X (Formerly Twitter): Password reset link not validated.

Hi, team . I found that password reset link sent by twitter is not validated. Description: When a user ask for password reset link at two different times, say at 12.00 PM and at 12.03 PM. Then he is able to change his password using either of the link. Here the previous token is not expiring as...

Mail.ru: target.mail.ru: XSS

POST /ajax/uploadimage/ HTTP/1.1 Host: target.mail.ru User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.9; rv:28.0 Gecko/20100101 Firefox/28.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip, defla...

DAMN Hash Calculator 1.5.1 - Local Heap Overflow PoC

No description provided by source. !/usr/bin/python Exploit Title: DAMN Hash Calculator v1.5.1 Local Heap Overflow PoC Version: 1.5.1 Date: 2012-02-21 Author: Julien Ahrens Homepage: http://www.inshell.net Software Link: http://www.google.com Tested on: Windows XP SP3 Professional German Notes: O...

Microsoft Internet Explorer 5.5 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2833/info Internet Explorer contains a flaw which could enable a remote web site operator to retrieve a known file from a visiting user's system. If a specially formed script containing GetObject function with the known...

joomla component (com_ponygallery) SQL injection Vulnerability

No description provided by source. Exploit Title: joomla component componygallery SQL injection Vulnerability Download : http://www.adyawinsa.com/index.php/remository?func=fileinfo&id=2 Date: 11/04/2012 Author: xDarkSton3x E-mail : [email protected] Category: webapps Google dork:...

Star Downloader Free <= 1.45 (.dat) Universal SEH Overwrite Exploit

No description provided by source. / :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered and Exploited by dun Star Downloader Free = v1.45 .dat Universal SEH Overwrite Exploit Vendor: http://www.stardownloader.co...

DmxReady Links Manager 1.2 - SQL Injection Vulnerability

No description provided by source. Exploit Title: DmxReady Links Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:inclinksmanager.asphttp://demo.dmxready.com/applications/CatalogManager/inccatalogmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link:...

Family Connections CMS 2.5.0 & 2.7.1 - (less.php) Remote Command Execution

No description provided by source. ?php / Family connections CMS v2.5.0-v2.7.1 remote command execution exploit vendor: https://www.familycms.com/ software link: https://www.familycms.com/download.php author: mrme::rwx kru email: steventhomasseeley!gmail!com ----------------------------------...

phpPgAdmin <= 4.2.1 (_language) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl phpPgAdmin = 4.2.1 Local File Inclusion Vulnerability Script: phpPgAdmin is a web-based administratio...

TinyWebGallery 1.8.3 - Remote Command Execution

No description provided by source. 1 -------------- filefunctions.inc : function executecommand $command global $useshellexec; obstart; seterrorhandler"onerrornooutput"; i f substr@phpuname, 0, 7 == "Windows" // Make a new instance of the COM object $WshShell = new COM"WScript.Shell"; // Make the...

E.M. Total Video Player 1.31 - (.wav) Local Crash Exploit

No description provided by source. !/usr/bin/perl E.M. Total Video Player V1.31 .wav Local Crash Exploit Author : v3n0m Site : http://yogyacarderlink.web.id/ group : YOGYACARDERLINK Date : February, 22-2010 INDONESIA Software : E.M. Total Video Player Version : 1.31 Other versions may also be...