iTech Image Sharing Script 4.13 - SQL Injection

Exploit Title: iTech Image Sharing Script 4.13 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage : http://itechscripts.com/ Software Link: http://itechscripts.com/image-sharing-script/ Demo: http://photo-sharing.itechscripts.com/ Version: 4.13 Category: Webapps Tested on:...

August 15, 2017 – Morning Cyber Coffee Headlines – “Cats” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 15, 2017 - Headlines How Cybersecurity Became 2017’s Hot New Major - The...

Facebook Covertly Launches A Photo-Sharing App In China

The Chinese market is no doubt a pot of gold for big technology giants with over 700 million internet users, but the Chinese government heavily controls the Internet within its borders through its Golden Shield project – the Great Firewall of China. The Great Firewall has blocked some 171 out of...

Apache Tomcat Security Bypass Vulnerability (CNVD-2017-28316)

Apache Tomcat is the United States Apache Apache Software Foundation under the Jakarta project of a lightweight Web application server , it is mainly used for the development and debugging of JSP programs for small and medium-sized systems.CORS Filter is one of the components to provide...

Complaint Alleges Hotspot Shield VPN Engages in Deceptive Trade Practices

A complaint has been filed with the U.S. Federal Trade Commission alleging that a free VPN service marketed as a provider of secure and anonymous internet access shares user data and redirects traffic to partners, including online advertising companies. The Center for Democracy and Technology CDT...

Express Compressed Fonts Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits exploited this vulnerability would gain code execution on the target system. Users whose accounts are configured to have fewer user...

Decentralized Peer to Peer File Sharing: iWant

A command-line tool for searching and downloading files in LAN network, without any central server. Features Decentralized : There is no central server hosting files. Therefore, no central point of failure Easy discovery of files : As easy as searching for something in Google. File download from...

Design/Logic Flaw

GigaCC OFFICE ver.2.3 and earlier allows remote attackers to upload arbitrary files as a user profile image, which may be exploited for unauthorized file sharing...

CVE-2016-7845

GigaCC OFFICE ver.2.3 and earlier allows remote attackers to upload arbitrary files as a user profile image, which may be exploited for unauthorized file sharing...

CVE-2016-7845

GigaCC OFFICE ver.2.3 and earlier allows remote attackers to upload arbitrary files as a user profile image, which may be exploited for unauthorized file sharing...

CVE-2016-7845

GigaCC OFFICE ver.2.3 and earlier allows remote attackers to upload arbitrary files as a user profile image, which may be exploited for unauthorized file sharing...

CVE-2016-7845

CVE-2016-7845 affects GigaCC OFFICE (ver. 2.3 and earlier). The vulnerability allows remote attackers to upload arbitrary files as a user profile image, enabling potential unauthorized file sharing. The JVN/JVNDB entry and JVNDB-2017-001054 description corroborate an arbitrary file upload via the...

See how I through subdomain takeover to bypass the Uber Single Sign-On authentication mechanism-vulnerability warning-the black bar safety net

! Uber to use the Amazon CloudFront CDN architecture website saostatic. uber. com there is a subdomain of the security vulnerability, an attacker take over. In addition, Uber recently deployed in the site auth. uber. com, based on Uber all the subdomain cookie sharing to achieve authentication of...

CVE-2017-2589

It was discovered that the hawtio servlet uses a single HttpClient instance to proxy requests with a persistent cookie store cookies are stored locally and are not passed between the client and the end URL which means all clients using that proxy are sharing the same cookies...

Microsoft Office Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands. In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to...

July 26, 2017 – Morning Cyber Coffee Headlines – “Wright Brothers” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 26, 2017 - Headlines Carbon Black in the News: Security expert shares tips...

CVE-2017-3742

In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection is made between two systems for the purpose of sharing files, the password for this ad-hoc connection will be stored in a user-readable location. An attacker with read access to t...

CVE-2017-3742

CVE-2017-3742 details from Lenovo advisory: Lenovo Connect2 stores the ad-hoc connection password in a user-readable location on Windows builds before 4.2.5.4885 and Android builds before 4.2.5.3071. This allows an attacker with access to the user’s files to view the contents being transferred vi...

Easy File Sharing Web Server 7.2 Buffer Overflow

!/usr/bin/python Easy File Sharing Web Server 7.2 - SEH Exploit - Tested successfully on Windows 10 x64 GET 'passWD' Buffer OverflowSEH pop pop ret @ 0x100195f2 : pop esi pop ecx ret in ImageLoad.dll Author: NA , NAattutanota.com OS Name: Microsoft Windows 10 Home OS Version: 10.0.14393 N/A Build...

Awesome! WhatsApp Now Lets You Send Files of Any Format

Have you ever felt like wishing of sending any type of file immediately to your friends and office colleagues on WhatsApp directly, instead of just contacts, images or documents? Well, now you can… The latest version of WhatsApp for Android and iOS now allows users to send and receive any type of...