A zero-day vulnerability has been discovered in PAN’s GlobalProtect firewall

THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here. Palo Alto Networks PAN released an update on November 10, 2021, that patched CVE-2021-3064, which was discovered and disclosed by Randori. This vulnerability affects PAN firewalls that use the GlobalProtect Portal VPN, and ...

Weren’t you warned about reactivating the Print Spooler?

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. After almost 10 days of releasing an advisory by the Hive Pro Threat Research team, a new vulnerability has been found in Windows Print Spooler. This is a privilege escalation flaw that allows attackers to run arbitrary code...

API Discovery and Profiling -- Visibility to Protection

APIs have become a dominant mechanism in the modern web, allowing organizations to create powerful web and mobile experiences, while exposing back-end data and logic to create new and innovative offerings. Protecting internet-facing APIs -- an emerging practice over the past few years -- is the...

Quark-Engine - An Obfuscation-Neglect Android Malware Scoring System

An Obfuscation-Neglect Android Malware Scoring System Concepts Android malware analysis engine is not a new story. Every antivirus company has their own secrets to build it. With curiosity, we develop a malware scoring system from the perspective of Taiwan Criminal Law in an easy but solid way. W...

Exploit for CVE-2018-1305

Apache Tomcat Security Bypass Vulnerability !exploithttps:...

Zendesk: Chat History CSV Export Excel Injection Vulnerability

I have found a vulnerability in the Chat History export function. If an attacker submits a special name containing a system command when chatting with an agent and that agent later exports the history of that chat to CSV, the resulting CSV may execute commands when opened. I have tested this usin...

Quick Paypal Payments 3.0 - Presistant XSS (0day)

No description provided by source. TITLE ===== Quick Paypal Payments - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x BLOG ==== https://zy0d0x.com DATE ==== 10/08/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================ Quick Paypal Paymen...

Dexs PM System Wordpress Plugin - Authenticated Persistent XSS (0day)

No description provided by source. =============================================================================== | | / / / / / / // / / -/ - / // / / / / // / ////,//////,// ///, / // team PUBLIC SECURITY ADVISORY | |...

Quick Paypal Payments 3.0 - Presistant XSS (0day)

Exploit for php platform in category web applications TITLE ===== Quick Paypal Payments - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x BLOG ==== https://zy0d0x.com DATE ==== 10/08/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================...

Wordpress Quick Contact Form Plugin 6.0 - Persistent XSS

Exploit for php platform in category web applications TITLE ===== Quick Contact Form - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x DATE ==== 10/06/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================ Quick Contact Form Wordpress...

V-CMS 1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................V-CMS 1.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://v-cms.org/ Discovery Date..........11/13/2011 Tested...

Taha Portal 3.2 Cross Site Scripting

||------------------------------------------------------------------|| ||Software..............Taha Portal v 3.2 ||Vulnerability.........Cross Site Scripting ||Threat Level..........High ||Vender................www.tahasystem.com ||Author................Bl4ck.Viper Turkish Hacker...

eGroupWare 1.8.001.20110421 - Multiple Vulnerabilities

eGroupWare 1.8.001.20110421 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................eGroupware 1.8.001.20110421 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

i-doIT 0.9.9-4 LFI Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................i-doIT 0.9.9-4 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.i-doit.org/...

Tickets 2.13 - SQL Injection

------------------------------------------------------------------------ --Description-- A sql injection vulnerability in Tickets 2.13 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell. --PoC--...

eGroupware 1.8.001.20110421 Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................eGroupware 1.8.001.20110421 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

i-doIT 0.9.9-4 - Local File Inclusion

i-doIT 0.9.9-4 - Local File Inclusion ------------------------------------------------------------------------ Software................i-doIT 0.9.9-4 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.i-doit.org/ Discovery...

Kryn.cms 0.9 Cross Site Scripting

------------------------------------------------------------------------ Software................Kryn.cms 0.9 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.kryn.org/ Discovery Date..........5/19/2011 Tested...

docMGR 1.1.2 Cross Site Scripting

------------------------------------------------------------------------ Software................docMGR 1.1.2 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.docmgr.org/ Discovery Date..........5/12/2011 Tested...

Vanilla Forum 2.0.17.9 LFI Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...