Giving Red-Teamers the Blues

Pen-testing engagements are generally a breeze for most red-teamers; roadblocks are few, despite the ones in place being expensive and often paid for by very large companies. Chris Nickerson has been running such engagements for 15 years and he sees companies that throw more money and more server...

solutionslab.vzw.com XSS vulnerability

Vulnerable URL: https://solutionslab.vzw.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 28.06.2017 Latest check for patch:| 28.06.2017 19:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

AppCan vulnerability spree(AppCan weak password\XSS\SQL injection\sensitive files leaked\weak password\file upload vulnerability collection)-vulnerability warning-the black bar safety net

Test yourself to write the discuz scan tool robustness of the time to find a backup file http://bbs. appcan. cn//config/configucenter. php. bak Use uckey getshell failure,the test has changed uckey. To continue testing,found a suspected injection point http://edu. appcan. cn/traindetailnew. html?...

kyoceradocumentsolutions.com.mx XSS vulnerability

Vulnerable URL: http://www.kyoceradocumentsolutions.com.mx/americas/jsp/Kyocera/productscategory.jsp?scid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:17 GMT Vulnerability type...

HP Support Assistant Detection (Windows SMB Login)

Detects the installed version of HP Support Assistant Version Detection Windows. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

[SECURITY] Fedora 24 Update: springframework-amqp-1.3.9-4.fc24

The Spring AMQP project applies core Spring concepts to the development of AMQP-based messaging solutions. It provides a "template" as a high-level abstraction for sending and receiving messages. It also provides support for Message driven POJOs with a "listener container". These libraries...

login.leadingmarketingsolutions.com.au XSS vulnerability

Vulnerable URL: http://login.leadingmarketingsolutions.com.au/mobile/?appcode=LiveWellAus=WebViewControllerid=3442052url=L21vYmlsZS8/YXBwY29kZT1MaXZlV2VsbEF1cw===%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%3Cimg/onerror=%27;%20alert%28/OPENBUGBOUNTY/%29;%27src=1%3E Details: Description| Valu...

Web India Solutions CMS 2015 - SQL Injection Vulnerability

No description provided by source...

Rollout or Not: the Benefits and Risks of iOS Remote Hot Patching

Previously On iOS Remote Hot Patching Apple’s detailed app review process has resulted in greater security for iOS apps made available through the App Store. However, this review process can be lengthy, which negatively impacts developers who need to quickly patch a buggy or insecure app. As a...

US, Canada Issue Ransomware Advisory

Ransomware clearly has people on many fronts worried, so much so that the United States and Canada took an unprecedented step last week to issue a joint advisory on the threat posed by crypto-ransomware. The U.S. Cyber Emergency Response Team together with the Canadian Cyber Incident Response...

Techsoft WS CMS 2016 Q2 - SQL Injection Web Vulnerability

Document Title: =============== Techsoft WS CMS 2016 Q2 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1810 Release Date: ============= 2016-04-04 Vulnerability Laboratory ID VL-ID: ====================================...

Techsoft Web Solutions CMS 2016 Q2 SQL Injection

Document Title: =============== Techsoft Web Solutions CMS 2016 Q2 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1810 Release Date: ============= 2016-04-04 Vulnerability Laboratory ID VL-ID:...

SAMSUNG Display Solutions - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SAMSUNG Display Solutions published at the 'play' market has multiple vulnerabilities...

Fireware XTM Web UI Open Redirect

================================================================ Fireware XTM Web UI - Open Redirect ================================================================ Information -------------------- Name: Fireware XTM Web UI - Open Redirect Affected Software : Fireware XTM Web UI Affected Version...

Liferay Portal 5.1.2 - Persistent Cross-Site Scripting

Liferay Portal 5.1.2 - Persistent Cross-Site Scripting Exploit Title: Liferay Portal 5.1.2 - Persistent XSS Discovery Date: 2016-02-10 Exploit Author: Sarim Kiani Vendor Homepage: https://www.liferay.com Software Link: https://www.liferay.com/community/releases Version: 5.1.2 Tested on: Windows O...

Stolen Data on 1.5 Million Verizon Enterprise Customers Up for Sale

Verizon is in the process of notifying customers of its Enterprise Solutions division that their data has been breached. The news comes a few days after a treasure trove of information on 1.5 million Verizon Enterprise customers reportedly made its way onto an underground cybercrime forum,...

Soundy Background Music 3.1 Cross Site Scripting

FULL DISCLOSURE Product : Soundy Background Music Exploit Author : Rahul Pratap Singh Version : 3.1 Home page Link : https://wordpress.org/plugins/soundy-background-music/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 12/3/2016 XSS Vulnerabilit...

GE SNMP/Web Interface Multiple Vulnerabilities

SNMP/Web Interface adapter is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress CSV Import 1.0 Cross Site Scripting

FULL DISCLOSURE Product : CSV Import Exploit Author : Rahul Pratap Singh Version : 1.0 Home page Link : https://wordpress.org/plugins/csv-import/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 23/Feb/2016 XSS Vulnerability:...

Investors Application Cross Site Scripting

Document Title: =============== Investors Application - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1540 Facebook Security ID: 246414938 Release Date: ============= 2016-02-12 Vulnerability Laboratory ID VL-ID:...