Vagrant Synced Folder Vagrantfile Breakout

This module exploits a default Vagrant synced folder shared folder to append a Ruby payload to the Vagrant project Vagrantfile config file. By default, unless a Vagrant project explicitly disables shared folders, Vagrant mounts the project directory on the host as a writable 'vagrant' directory o...

Vagrant Synced Folder Vagrantfile Breakout

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Vagrant Synced Folder Vagrantfile Breakout', 'Description' = %q This module exploits a default Vagrant synced folder shared folder to append a Ru...

Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2015-0069)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0069 advisory. 1:1.8.0.31-1.b13 - Update to January CPU patch update. - Resolves: RHBZ1180299 1:1.8.0.25-4.b17 - updated aarch64 sources - epoch synced to 1 - all ppc...

java-1.8.0-openjdk security update

1:1.8.0.31-1.b13 - Update to January CPU patch update. - Resolves: RHBZ1180299 1:1.8.0.25-4.b17 - updated aarch64 sources - epoch synced to 1 - all ppcs excluded from classes dump1156151 - Resolves: rhbz1173706...

Openfolio: xss in /browse/contacts/

hey guys i just found an xss in openfolio i just created an contact in google with name as " and gave an email as random url https://www.google.com/contacts/u/0/contact/new then i synced openfolio with google contacts then i went here https://openfolio.com/browse/contacts/ then i clicked on invit...