6663 matches found
Four Ways Layered Security Will Improve Your Detection and Response
It’s widely understood by cybersecurity professionals today that it’s no longer a case of if your organization gets attacked online but when. Trend Micro blocked more than 20.4 billion threats in the first half of 2018 alone, and the ready availability of “as-a-service” toolkits will continue to...
Social Sharing Plugin – Kiwi <= 2.0.10 - Update Any Option
The Social Sharing Plugin – Kiwi WordPress plugin was affected by an Update Any Option security vulnerability...
Denial of Service Vulnerability in WIFI Sharing Wizard v5.0.0919
WIFI Sharing Wizard is a WIFI sharing software. WIFI Sharing Wizard v5.0.0919 suffers from a denial of service vulnerability. An attacker can exploit the vulnerability to cause a computer to blue screen, resulting in a denial of service...
Easy File Sharing Web Server 7.2 - author Remote Buffer Overflow (SEH) Exploit
An issue was discovered in Easy File Sharing EFS Web Server 7.2, A stack-based buffer overflow vulnerability occurs when an authenticated user sends a malicious POST request to forum.ghp upon creating a new topic in the forums, which allows remote attackers to execute arbitrary code. Exploit Titl...
Nextcloud Server Improper Access Control Checking Vulnerability
Nextcloud is a set of client-server software for creating file hosting services and using them. An improper access control checking vulnerability exists in versions of Nextcloud Server prior to 14.0.0, which can be exploited by an unauthenticated, remote attacker via the publicpreview.php functio...
U.S. Dept Of Defense: Access to all █████████ files, including CAC authentication bypass
Summary: Due to an Insecure Direct Object Reference IDOR in adding recipients to a shared package on ██████████, an unauthenticated attacker can access all files uploaded to ████. As described on ██████████ website, this includes documents with classifications up to FOUO, including PII / PHI...
Microsoft Data Sharing - Local Privilege Escalation Exploit
Exploit for windows platform in category local exploits Microsoft Data Sharing - Local Privilege Escalation Exploit Bug description: RpcDSSMoveFromSharedFilehandle,L"token",L"c:\blah1\pci.sys"; This function exposed over alpc, has a arbitrary delete vuln. Hitting the timing was pretty annoying...
Windows ‘Deletebug’ Zero-Day Allows Privilege Escalation, Destruction
A proof-of-concept exploit for a Windows zero-day that works on fully patched Windows 10 machines has been released by a security researcher. It allows an attacker to delete any kind of file on a victim machine, including system data. The flaw no CVE has been assigned since it was just exposed on...
Hacker Discloses New Windows Zero-Day Exploit On Twitter
A security researcher with Twitter alias SandboxEscaper—who two months ago publicly dropped a zero-day exploit for Microsoft Windows Task Scheduler—has yesterday released another proof-of-concept exploit for a new Windows zero-day vulnerability. SandboxEscaper posted a link to a Github page hosti...
Hacker Discloses New Windows Zero-Day Exploit On Twitter
A security researcher with Twitter alias SandboxEscaper—who two months ago publicly dropped a zero-day exploit for Microsoft Windows Task Scheduler—has yesterday released another proof-of-concept exploit for a new Windows zero-day vulnerability. SandboxEscaper posted a link to a Github page hosti...
Partner Perspectives: The Power of Shared Intelligence: Juniper Sky ATP and Cb Response
Scott Emo is the Director of Field Readiness, Security, for Juniper Networks. Uncover and Mitigate the Most Sophisticated Cyber Attacks The rapid growth of emerging technologies, combined with an increasing number of connected devices running business-critical applications in highly distributed...
Microsoft Data Sharing - Local Privilege Escalation (PoC)
Microsoft Data Sharing - Local Privilege Escalation PoC Bug description: RpcDSSMoveFromSharedFilehandle,L"token",L"c:\blah1\pci.sys"; This function exposed over alpc, has a arbitrary delete vuln. Hitting the timing was pretty annoying. But my PoC will keep rerunning until...
Microsoft Data Sharing - Local Privilege Escalation (PoC)
Bug description: RpcDSSMoveFromSharedFilehandle,L"token",L"c:\blah1\pci.sys"; This function exposed over alpc, has a arbitrary delete vuln. Hitting the timing was pretty annoying. But my PoC will keep rerunning until c:\windows\system32\drivers\pci.sys is deleted. I believe it's impossible to hit...
MV Video Sharing Software 1.2 SQL Injection
Exploit Title: MV Video Sharing Software 1.2 - 'searchname' SQL Injection Dork: N/A Date: 2018-10-16 Exploit Author: Ihsan Sencan Vendor Homepage: https://melerovideo.com/software/ Software Link: https://sourceforge.net/projects/mvvideosharingsoftware/ Version: 1.2 Category: Webapps Tested on:...
Easy File Sharing Web Server 7.2 - Domain Name Buffer Overflow Exploit
Exploit for windows platform in category local exploits -------------------------------------------------------- Exploit Title: Easy File Sharing Web Server 7.2 - 'Domain Name' Buffer Overflow Exploit Exploit Author : ZwX Exploit Date: 2018-09-19 Vendor Homepage : http://www.sharing-file.com/ Lin...
Easy File Sharing WS v7.2 - (Domain Name) Buffer Overflow
Document Title: =============== Easy File Sharing WS v7.2 - Domain Name Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2154 Release Date: ============= 2018-10-05 Vulnerability Laboratory ID VL-ID: ====================================...
Easy File Sharing Web Server 7.2 Domain Name Buffer Overflow
-------------------------------------------------------- Exploit Title: Easy File Sharing Web Server 7.2 - 'Domain Name' Buffer Overflow Exploit Exploit Author : ZwX Exploit Date: 2018-09-19 Vendor Homepage : http://www.sharing-file.com/ Link Software : http://www.sharing-file.com/efssetup.exe...
Easy File Sharing WS v7.2 - (Domain Name) Buffer Overflow
Document Title: =============== Easy File Sharing WS v7.2 - Domain Name Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2154 Release Date: ============= 2018-10-04 Vulnerability Laboratory ID VL-ID: ====================================...
Chaturbate: Cross-origin resource sharing: arbitrary origin trusted on chatws25.stream.highwebmedia.com
Very low-quality reports, such as those which only contain automated output, will be rejected. Summary Hi, i was able to discover a number of instances on chatws25.stream.highwebmedia.com were the application accepts an arbitrarily supplied origin. The application implements an HTML5 cross-origin...
Easy File Sharing WS v7.2 - (UserId) Buffer Overflow
Document Title: =============== Easy File Sharing WS v7.2 - UserId Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2149 Release Date: ============= 2018-10-02 Vulnerability Laboratory ID VL-ID: ==================================== 2149...