RouterSploit v3.4.0 - Exploitation Framework For Embedded Devices

The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aids penetration testing operations: exploits - modules that take advantage of identified vulnerabilities creds - modules designed to test credentials against...

org.grails:grails-dependencies (2.0.3), org.grails:grails-plugin-testing (2.0.3) potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.0.3)

org.grails:grails-core MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.0.3 - org.grails:grails-plugin-testing 2.0.3 Source cves: CVE-2018-1000529 Source...

org.grails:grails-dependencies (2.1.1), org.grails:grails-plugin-testing (2.1.1) potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.1.1)

org.grails:grails-core MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.1.1 - org.grails:grails-plugin-testing 2.1.1 Source cves: CVE-2018-1000529 Source...

org.grails:grails-plugin-testing (2.0.2) potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.0.2)

org.grails:grails-core MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-plugin-testing 2.0.2 Source cves: CVE-2018-1000529 Source advisory: OSV:GHSA-Q25J-GCMV-5QPP...

com.jolira:testing-tools (1.2.5), org.apache.geronimo.assemblies:geronimo-jetty7-javaee5 (2.2.1) +155 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.2.1.v20101111)

org.eclipse.jetty:jetty-server MAVEN version 7.2.1.v20101111 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.jolira:testing-tools 1.2.5 - org.apache.geronimo.assemblies:geronimo-jetty7-javaee5...

8 Popular Courses to Learn Ethical Hacking – 2018 Bundle

Update Oct 2018 — Over 30,000 students from all around the world have joined this training program so far. Due to the growing number of threats in the computer world, ethical hackers have become the most important player for not only governments but also private companies and IT firms in order to...

UPDATED VERSION: RouterSploit 3.4.0

PenTestIT RSS Feed RouterSploit 3.4.0, the long awaited router exploitation framework update is out guys! This release includes some really cool features and updates such as using pycryptodome from pycryptoand newer exploitation modules! Read on for the improvements. What is RouterSploit? The...

producttestingusa.com XSS vulnerability

Open Bug Bounty ID: OBB-687740 Description| Value ---|--- Affected Website:| producttestingusa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

com.graphaware.neo4j:server (>=3.4.0.52, <=3.4.8.52), com.graphaware.neo4j:tests (>=3.4.0.52, <=3.4.8.52) +8 more potentially affected by CVE-2018-18389 via org.neo4j:neo4j-enterprise (>=3.4.0, <=3.4.8)

org.neo4j:neo4j-enterprise MAVEN version =3.4.0, =3.4.0.52, =3.4.0.52, =3.4.0, =3.4.0, =0.1.9, =0.1.9, =0.1.9, =0.2.1, =0.1.9, =0.2.2 Source cves: CVE-2018-18389 Source advisory: GHSA-H5F5-RJ4R-42F6...

com.dell.cpsd.common.messaging:common-testing (1.5.0), com.dell.cpsd:common-testing (>=2.0.0, <=2.2.0) +1 more potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.28)

org.apache.qpid:qpid-broker MAVEN version 0.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - com.dell.cpsd.common.messaging:common-testing 1.5.0 - com.dell.cpsd:common-testing =2.0.0, =1.0.0, =1.1...

SQLMap v1.2.10 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

GPlayed Trojan - .Net playing with Google Market

This blog post is authored by Vitor Ventura. Introduction In a world where everything is always connected, and mobile devices are involved in individuals' day-to-day lives more and more often, malicious actors are seeing increased opportunities to attack these devices. Cisco Talos has identified...

VLC Media Player 2.2.8 MKV Use-After-Free

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VLC Media Player MKV Use After Free', 'Description' = %q This module exploits a use after free vulnerability in VideoLAN VLC = MSFLICENSE, 'Autho...

Security Vulnerabilities in US Weapons Systems

The US Government Accounting Office just published a new report: "Weapons Systems Cyber Security: DOD Just Beginning to Grapple with Scale of Vulnerabilities" summary here. The upshot won't be a surprise to any of my regular readers: they're vulnerable. From the summary: Automation and connectivi...

ANDRAX - The First And Unique Penetration Testing Platform For Android Smartphones

ANDRAX The first and unique Penetration Testing platform for Android smartphones What is ANDRAX ANDRAX is a penetration testing platform developed specifically for Android smartphones, ANDRAX has the ability to run natively on Android so it behaves like a common Linux distribution, But more...

Exploit for Code Injection in Pivotal_Software Spring_Data_Commons

CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to...

DarkSpiritz - A Penetration Testing Framework For UNIX Systems

What is DarkSpiritz? Created by the SecTel Team it was a project of one of the owners to update and clean-up an older pentesting framework he had created to something updated and modern. DarkSpiritz is a re-vamp of the very popular framework known as "Roxysploit". You may be familiar with this...

Pumping the Brakes on Artificial Intelligence

While the push-pull between defenders and attackers using artificial intelligence continues, there’s another security dimension to machine intelligence that should be of concern. Just as the rise of IoT devices has created an inadvertent new threat surface ripe for introducing vulnerabilities, so...

SRC-2019-0014 : Oracle Application Testing Suite UploadServlet External Entity Injection Information Disclosure Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UploadServlet servlet. Due to the...

H2 Database 1.4.196 - Remote Code Execution

Exploit Title: H2 Database 1.4.196 - Remote Code Execution Google Dork: N/A Date: 2018-09-24 Exploit Author: h4ckNinja Vendor Homepage: https://www.h2database.com/ Software Link: http://www.h2database.com/h2-2018-03-18.zip Version: 1.4.196 and 1.4.197 Tested on: macOS/Linux CVE: N/A This takes...