11989 matches found
Metasploit Framework 6.0.11 - msfvenom APK template command injection Exploit
Exploit Title: Metasploit Framework 6.0.11 - msfvenom APK template command injection Exploit Author: Justin Steven Vendor Homepage: https://www.metasploit.com/ Software Link: https://www.metasploit.com/ Version: Metasploit Framework 6.0.11 and Metasploit Pro 4.18.0 CVE : CVE-2020-7384 !/usr/bin/e...
[SECURITY] Fedora 33 Update: kernel-5.10.10-200.fc33
The kernel meta package...
GHSA-29V9-2FPX-J5G9 CSV Injection vulnerability with exported contact lists in Mautic
Impact Mautic versions before 2.13.0 had a vulnerability that allowed a CSV injection with exported contact lists - https://www.owasp.org/index.php/CSVInjection. Patches Update to 2.13.0 or later. Workarounds None. For more information If you have any questions or comments about this advisory:...
OSV-2018-367 Use-of-uninitialized-value in cf2_glyphpath_lineTo
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8323 Crash type: Use-of-uninitialized-value Crash state: cf2glyphpathlineTo cf2glyphpathcloseOpenPath cf2glyphpathmoveTo...
Exploit for Deserialization of Untrusted Data in Liferay Liferay_Portal
CVE-2020-7961 Exploit script for CVE-2020-7961 Unauthenticated...
OSV-2017-22 Heap-buffer-overflow in opj_tcd_mct_decode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3331 Crash type: Heap-buffer-overflow READ 4 Crash state: opjtcdmctdecode opjtcddecodetile opjj2kdecodetile...
Hack the US Army for good with ‘Hack The Army’ bug bounty program
By Sudais Asif For now, only those with invitation can join the new bug bounty program. Here's what we know so far and what to expect. This is a post from HackRead.com Read the original post: Hack the US Army for good with Hack The Army bug bounty program...
Cockpit 234 Server-Side Request Forgery
Exploit Title: Cockpit Version 234 - Server-Side Request Forgery Unauthenticated Date: 08.01.2021 Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://cockpit-project.org/ Version: v234 Tested on: Ubuntu 18.04 !/usr/bin/python3 import argparse import requests import sys import urllib3...