11989 matches found
TP-LINK TL-WR840N Cross Site Scripting
Exploit Title: TL-WR840N v5 00000005 Date: 5/10/2019 Exploit Author: purnendu ghosh Vendor Homepage: https://www.tp-link.com/ Software Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Category: Hardware Firmware Version:0.9.1 3.16 v0001.0 Build 171211 Rel.5880...
Brocade Network Advisor 14.4.1 - Unauthenticated Remote Code Execution
/ Exploit Title: Brocade Network Advisor - Unauthenticated Remote Code Execution Date: 2017-03-29 Exploit Author: Jakub Palaczynski Vendor Homepage: https://www.broadcom.com/ CVE: CVE-2018-6443 Version: Tested on Brocade Network Advisor 14.X.X versions. Other may also be affected. Tested on EMC...
Newsletter Manager < 1.5 - Unauthenticated Open Redirect
The plugin used base64 encoded user input in the appurl parameter without validation, to redirect users using the header PHP function, leading to an open redirect issue In the file '/newsletter-manager/confirmation.php': 33: $xyzemurl = base64decode$GET'appurl'; ... 179:...
Emerson HART VE4005S2B1 Analog Output Card Detection
Binary data 756722.prm...
Mitsubishi GT2708-STBA HMI Detection
Binary data 751746.prm...
Dodge Dodge EZLINK 55595
Binary data 754807.prm...
Emerson HART SE4005S2B3 Analog Output Card Detection
Binary data 756790.prm...
Lotus Domino 8.5.3 - EXAMINE Stack Buffer Overflow DEPASLR Bypass (NSAs EMPHASISMINE)
Lotus Domino 8.5.3 - EXAMINE Stack Buffer Overflow DEPASLR Bypass NSAs EMPHASISMINE Here is a working version of the NSA's EMPHASISMINE for IMAP Server Lotus Domino 8.5.3 FP0 DEP/ASLR bypass Replace breakpoints with msfvenom payload ALPHANUMERIC I love you Alison Thompson OAM @ThirdWaveORG Author...
Authorization Bypass
openjdk is vulnerable to authorization bypass. An unspecified vulnerability allows remote attackers to affect integrity via unknown vectors related to Networking...
Supply Chain Hackers Snuck Malware Into Videogames
An aggressive group of supply chain hackers strikes again, this time further upstream...
Never Forget That You Are Being Watched
By David Balaban What data do Facebook, Google, and mobile apps collect, do mobile carriers listen to your calls? Read this post and find answers to these and other privacy questions as well as get tips on how to protect your personal data. It has become known that information about 257,000...
[SECURITY] Fedora 30 Update: libmodulemd-2.2.3-3.fc30
C Library for manipulating module metadata files. See https://github.com/fedora-modularity/libmodulemd/blob/master/README.md for more details...
Cyberspies Hijacked the Internet Domains of Entire Countries
A mysterious new group called Sea Turtle targeted 40 organizations in a DNS hijacking spree...
Linux/x64 - XANAX Decoder Shellcode (127 bytes)
Linux/x64 - XANAX Decoder Shellcode 127 bytes ; Date: 08/04/2019 ; XANAX Decoder ; Author: Alan Vivona ; Description: Reverts the xor-add-not-add-xor sequence using the same 4 byte key and executes the encoded payload. ; Tested on: x86-x64 GNU/Linux global start section .text keys.xor1 equ 0x29...
Apache HTTP Server < 2.4.39 Multiple Vulnerabilities
Binary data 700509.prm...
Manage Engine ServiceDesk Plus 9.3 - Privilege Escalation Exploit
Exploit for windows platform in category web applications !/usr/bin/python Exploit Title: Manage Engine ServiceDesk Plus Version 9.3 Privileged Account Hijacking Exploit Author: Ata Hakçıl, Melih Kaan Yıldız Vendor: ManageEngine Vendor Homepage: www.manageengine.com Product: Service Desk Plus...
FreeSMS 2.1.2 - SQL Injection (Authentication Bypass) Vulnerability
Exploit for php platform in category web applications Exploit Title: FreeSMS 2.1.2 - Authentication Bypass Exploit Author: Yilmaz Degirmenci Vendor Homepage: https://freesms.sourceforge.io/ Software Link: https://sourceforge.net/projects/freesms/ Version: v2.1.2 Category: Webapps Tested on: LAMPP...
Carbon Black’s Global Incident Response Threat Report: The Ominous Rise of “Island Hopping” & Counter Incident Response Continues
To stay abreast of the current attack landscape and to quantify the latest attack trends seen by leading IR firms, Carbon Black is publishing its third Global Incident Response Threat Report GIRTR since introducing it in July 2018. Aggregating qualitative and quantitative input from 40 Carbon Bla...