131 matches found
Affirm: Subdomain takeover due to non registered TLD [ โโโโโโโโโโ.โโโโโ.โโโโโโ.com ]
Summary: I was looking at recent disclosed report 1297689 and I was thinking to take a look for the same issue on this asset as I love to test for subdomain takeover vulnerabilities. While testing I noticed a DNS entry for โโโโโโโ.โโโโ.โโโโโโโโโโ.com is CNAME โโโโ.โโโโโโโโโโโ which's TLD is not...
Go-Shellcode - A Repository Of Windows Shellcode Runners And Supporting Utilities
go-shellcode is a repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques. The available Shellcode runners include: CreateFiber CreateProcess CreateProcessWithPipe CreateRemoteThread CreateRemoteThreadNati...
[SECURITY] Fedora 33 Update: kernel-tools-5.13.3-100.fc33
This package contains the tools/ directory from the kernel source and the supporting documentation...
Glassdoor: Reflected XSS on https://help.glassdoor.com/GD_HC_EmbeddedChatVF
Hi there, I have found the xss vulnerability at: https://help.glassdoor.com/GDHCEmbeddedChatVF Browsers tested: Firefox, Chrome, Edge latest version Steps To Reproduce: Go to: https://help.glassdoor.com/GDHCEmbeddedChatVF?FirstName=l0cpd%22;a=alert,b=document.domain,ab// Supporting...
[SECURITY] Fedora 34 Update: kernel-tools-5.12.10-300.fc34
This package contains the tools/ directory from the kernel source and the supporting documentation...
Pega Infinity็ป้็ป่ฟๆผๆด๏ผCVE-2021-27651๏ผ
Summary An attacker can bypass all stages of the password reset flow and reset any user's account on Pega infinity. This is done by 1 initiating the password reset flow and typing in the victim email, then 2 forcing the HTTP POST request to update the password through. An attacker could login usi...
[SECURITY] Fedora 32 Update: kernel-tools-5.11.19-100.fc32
This package contains the tools/ directory from the kernel source and the supporting documentation...
[SECURITY] Fedora 34 Update: kernel-tools-5.11.19-300.fc34
This package contains the tools/ directory from the kernel source and the supporting documentation...
[SECURITY] Fedora 32 Update: kernel-tools-5.11.16-100.fc32
This package contains the tools/ directory from the kernel source and the supporting documentation...
Fedora: Security Advisory for kernel-tools (FEDORA-2021-8cd093f639)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: kernel-tools-5.11.14-300.fc34
This package contains the tools/ directory from the kernel source and the supporting documentation...
[SECURITY] Fedora 33 Update: kernel-tools-5.11.14-200.fc33
This package contains the tools/ directory from the kernel source and the supporting documentation...
[SECURITY] Fedora 34 Update: kernel-tools-5.11.7-300.fc34
This package contains the tools/ directory from the kernel source and the supporting documentation...
Node.js third-party modules: [flsaba] Stored XSS in the file and directory name when directories listing
I would like to report a Stored XSS in module "flsaba". It allows to inject malicious scripts in the file and directory name, store them on the server, then execute these scripts in the browser via the XSS vulnerability. Module module name: https://www.npmjs.com/package/flsaba version: 1.1.0 npm...
Rocket.Chat: Desktop app RCE (#276031 bypass)
Summary: 276031 fix bypass, two click remote code execution. Description: The security issue is in links preload file https://github.com/RocketChat/Rocket.Chat.Electron/blob/master/src/preload/links.js file. By rewriting RegExp.prototype.test method it is possible to prepare proper answers to get...
[SECURITY] Fedora 31 Update: kernel-tools-5.5.6-200.fc31
This package contains the tools/ directory from the kernel source and the supporting documentation...
Ubuntu 18.04 LTS : Yubico PIV Tool vulnerabilities (USN-4276-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4276-1 advisory. It was discovered that libykpiv, a supporting library of the Yubico PIV Tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker wit...
Applied ThreadFix: Fire Bullets, Then Cannonballs โ AppSec Edition
The concept of "firing bullets and then cannonballs" comes from the book Great By Choice by Jim Collins and Morten T. Hansen. The idea works a little like this: first fire your "bullets" - low-cost, low-risk, low-distraction experiments to figure out what will work. This allows you to calibrate...
USN-4276-1: Yubico PIV Tool vulnerabilities
It was discovered that libykpiv, a supporting library of the Yubico PIV Tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker with a custom-made, malicious USB device could potentially execute arbitrary code on a computer running the Yubico PIV Tool or Yubikey PIV Manager...
Kubernetes: Kubelet resource exhaustion attack via metric label cardinality explosion from unauthenticated requests
Report Submission Form Summary: Malicious clients can potentially DOS a kubelet by sending a high amount of specially crafted requests to the kubelet's HTTP server. For each request the kubelet updates/sets 3 metrics: - kubelethttprequeststotal Counter - kubelethttprequestsdurationseconds Histogr...