[SECURITY] Fedora 23 Update: onionshare-0.7.1-1.fc23

OnionShare lets you securely and anonymously share files of any size. It wo rks by starting a web server, making it accessible as a Tor hidden service, and generating an unguessable URL to access and download files. It doesn't requ ire setting up a server on the internet somewhere or using a thir...

[SECURITY] Fedora 22 Update: onionshare-0.7.1-1.fc22

OnionShare lets you securely and anonymously share files of any size. It wo rks by starting a web server, making it accessible as a Tor hidden service, and generating an unguessable URL to access and download files. It doesn't requ ire setting up a server on the internet somewhere or using a thir...

Shopify: www.shopify.com XSS on blog pages via sharing buttons

social sharing buttons facebook and linkedin vulnerable to xss at www.shopify.com/guides/ www.shopify.com/videos/ and www.shopify.com/success-stories/ steps to reproduce: - go to page https://www.shopify.com/videos/pop-up-shop?x=';alert1// - share this page by clicking facebook or linkedin sharin...

Security Advisory - No Authentication Vulnerability on the Serial Port of the UAP2105

The UAP2105 serves as a radio access device in the uBro solutions. As one of the AP series products developed on the basis of 3GPP R99/R4/R5/R6 FDD, the UAP2105 complies with the R8 HNB standard and provides Small Office and Home Office SOHO and home users with improved indoor coverage. With the...

BusyBox SMB Sharing

This module will be applied on a session connected to a BusyBox shell. It will modify the SMB configuration of the device executing BusyBox to share the root directory of the device. This module requires Metasploit: https://metasploit.com/download Current source:...

German Spy-Agency Trades Citizens' Metadata in Exchange for NSA's Xkeyscore

This is Really Insane!! Germany's top intelligence agency handed over details related to German citizen metadata just in order to obtain a copy of the National Security Agency's Main XKeyscore software, which was first revealed by Edward Snowden in 2013. According to the new documents obtained by...

Easy File Sharing Web Server 6.9 - USERID Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Easy File Sharing Web Server v6.9 - USERID Remote Buffer Overflow Version: 6.9 Date: 2015-08-22 Author: Tracy Turben email protected Software Link: http://www.efssoft.com/ Tested on: Win7x32-EN,Win7x64-EN...

Easy File Sharing Web Server 6.9 - USERID Remote Buffer Overflow

!/usr/bin/python Exploit Title: Easy File Sharing Web Server v6.9 - USERID Remote Buffer Overflow Version: 6.9 Date: 2015-08-22 Author: Tracy Turben [email protected] Software Link: http://www.efssoft.com/ Tested on: Win7x32-EN,Win7x64-EN Special Thanks To: Julien Ahrens for the crafted jmp e...

Facebook ThreatExchange Information Sharing

As Facebook’s ThreatExchange information-sharing platform hits its six-month milestone, the social network today announced that its closing in on 100 participants and has streamlined the application process. ThreatExchange was launched in February as a free vehicle for sharing threat and attack...

How to Exploit BitTorrent for Large-Scale DoS Attacks

A flaw discovered in several widely used BitTorrent applications, including uTorrent, Vuze and Mainline, could be used to carry out a devastating distributed denial of service DDoS attack that makes it very easy for a single undetectable hacker to bring down large sites. A new research by Florian...

WordPress 1-Click Retweet/Share/Like 5.2 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Title: WordPress '1-click Retweet/Share/Like' Plugin Version: 5.2 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-21 Download: - https://wordpress.org/plugins/1-click-retweetsharelike/ -...

Disclosure of users files when deleting parent folders of shared files - ownCloud

Due to a common incorrect usage of the getPath function of the ownCloud virtual filesystem multiple security issues occurred. Especially the function may return null in case the specified file does not exist anymore. When passing the result of getPath in combination with null to functions that...

DHS Raises Privacy Concerns With Senate Cyber Threat Sharing Bill

A major information-sharing bill that’s in the Senate right now would allow private organizations to share threat data with any government agency, something that the Department of Homeland Security says could have severe privacy implications and cause confusion and inefficiencies inside the feder...

Server: Disclosure of users files when deleting parent folders of shared files

Due to a common incorrect usage of the getPath function of the ownCloud virtual filesystem multiple security issues occurred. Especially the function may return null in case the specified file does not exist anymore. When passing the result of getPath in combination with null to functions that...

Windows 10 Wi-Fi Sense Explained: Actual Security Threat You Need to Know

Just one day after Microsoft released its new operating system, over 14 Million Windows users upgraded their PCs to Windows 10. Of course, if you are one of the Millions, you should aware of Windows 10's Wi-Fi Sense feature that lets your friends automatically connects to your wireless network...

KeyBox - A web-based SSH console that centrally manages administrative access to systems

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. Administrators can login...

The Pirate Bay Founders Free Of Criminal Copyright Case

The four co-founders of The Pirate Bay, the world’s most popular torrent website, have been cleared of charges alleging criminal copyright infringement and abuse of electronic communications in a Belgian court. The Pirate Bay co-founders Gottfrid Svartholm, Fredrik Neij, Peter Sunde and Carl...

Vastal I-Tech phpVID Cross Site Scripting Vulnerability

Vastal I-Tech phpVID is a set of video sharing software by Vastal I-Tech India. The software supports browsing videos, commenting on videos, uploading videos and more. A cross-site scripting vulnerability exists in Vastal I-Tech phpVID versions 1.2.3 and 0.9.9, which stems from the program failin...

某高校大型仪器设备开放共享管理平台通用SQL注入之四

简要描述： 详细说明： 某高校大型仪器设备开放共享管理平台通用SQL注入之四。 案例： http://.../syjx/share/SHowFiles/MoreEqu.aspx http://.../SHowFiles/MoreEqu.aspx http://.../SHowFiles/MoreEqu.aspx http://.../nxdyq/SHowFiles/MoreEqu.aspx .../shiyan/share/SHowFiles/MoreEqu.aspx 漏洞证明： 注入证明： http://.../syjx/share/SHowFiles/MoreEqu.aspx...

某高校大型仪器设备开放共享管理平台通用SQL注入之三

简要描述： 详细说明： 某高校大型仪器设备开放共享管理平台通用SQL注入之三。 案例： http://.../SHowFiles/EquBookList.aspx http://.../syjx/share/SHowFiles/EquBookList.aspx http://.../SHowFiles/EquBookList.aspx http://.../nxdyq/SHowFiles/EquBookList.aspx .../shiyan/share/SHowFiles/EquBookList.aspx 漏洞证明： 注入证明：...