Komfy Switch With Camera DKZ-201S/W Password Disclosure

!/usr/bin/python Exploit Title: Komfy Switch with Camera Wifi Password Disclosure via Bluetooth BLE Date: Oct 13, 2016 Exploit Author: Jason Doyle @jasondoyle Vendor Homepage: http://us.dlink.com/products/connected-home/komfy-switch-with-camera/ HW Model: DKZ-201S/W SW Version: 1.0 Tested on:...

SELinux W+X Protection Bypass via AIO

Exploit for linux platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=854 SELinux has a set of permissions that can be used to prevent processes from creating executable memory mappings that contain data controlled by the process PROCESSEXECMEM,...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3596)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3596 advisory. - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24402831 CVE-2016-4470 - vfs: add vfsselectinode helper Miklos Szeredi Orabug:...

ZModo ZP-NE14-S DVR and ZP-IBH-13W Cameras Security Bypass Vulnerability

The ZModo ZP-NE14-S DVR and the ZModo ZP-IBH-13W are both digital video recorders from ZModo China. A security bypass vulnerability exists in the ZModo ZP-NE14-S DVR and ZP-IBH-13W Cameras. A remote attacker could exploit the vulnerability to gain access to the device with root privileges...

Fedora 22 : 2:qemu (2016-ea3002b577)

CVE-2016-4002: net: buffer overflow in MIPSnet bz 1326083 - CVE-2016-4952 scsi: pvscsi: out-of-bounds access issue - CVE-2016-5106: scsi: megasas: out-of-bounds write bz 1339581 - CVE-2016-5105: scsi: megasas: stack information leakage bz 1339585 - CVE-2016-5107: scsi: megasas: out-of-bounds read...

C.COM Events CMS 0.1.02 SQL Injection / Authentication Bypass

======================================================================== | Title : C.COM 0.1.02 Events CMS authentication bypass vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : http://www.congresalgerie.com/...

Joomla Forms 1.3.1 SQL Injection

======================================================================== | Title : Joomla comforms 1.3.1 Sql injection vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : https://github.com/subtext/comforms/blob/master/forms.xml...

CVE-2016-4824

The CVE-2016-4824 issue affects Corega CG-WLR300GNV and CG-WLR300GNV-W wireless routers. The WPS PIN authentication implementation does not limit the number of attempts, enabling authenticated brute-force attempts from within wireless range to recover the PIN and gain network access. Affected com...

JVN#75028871: CG-WLR300GNV Series does not limit authentication attempts

CG-WLR300GNV and CG-WLR300GNV-W provided by Corega Inc are wireless LAN routers. The WPS functionality in CG-WLR300GNV Series does not limit PIN authentication attempts, making it susceptible to brute force attacks. Impact An unauthenticated attacker within wireless range of the device may perfor...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2016:1560-1)

qemu was updated to fix 37 security issues. These security issues were fixed : - CVE-2016-4439: Avoid OOB access in 53C9X emulation bsc980711 - CVE-2016-4441: Avoid OOB access in 53C9X emulation bsc980723 - CVE-2016-4952: Avoid OOB access in Vmware PV SCSI emulation bsc981266 - CVE-2015-8817: Avo...

NerdyZine 2.0 SQL Injection

======================================================================== | Title : NerdyZine 2.0 SQL Injection vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : http://www.nerdyzine.net/...

中兴W-LAN无线接入控制器 /apgroup/getChannelByCountryCode.php 参数CountryCode注入漏洞

No description provided by source...

CVE-2016-4952

Quick EmulatorQemu built with the VMWARE PVSCSI paravirtual SCSI bus emulation support is vulnerable to an OOB r/w access issue. It could occur while processing SCSI commands 'PVSCSICMDSETUPRINGS' or 'PVSCSICMDSETUPMSGRING'. A privileged user inside guest could use this flaw to crash the Qemu...

On Ransomware Hitting an Online Casino, Brazil Taking WhatsApp Offline, And More

Mike Mimoso, Chris Brook, and Threatpost’s newest reporter, Tom Spring, discuss the week in news, including a first hand account of an online casino’s experience with a Teslacrypt infection, Brazil shutting down WhatsApp, and attackers mining an ADP portal for W-2s. Download:...

WordPress Hero Maps Pro plugin <= 2.1.0 - Cross Site-Scripting (XSS) vulnerability

Cross Site-Scripting XSS vulnerability discovered by Larry W. Cashdollar in WordPress Hero Maps Pro plugin versions = 2.1.0. Solution Plugin closed. Deactivate and delete...

W-Match : Chat & Dating App - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application W-Match : Chat & Dating App published at the 'play' market has multiple vulnerabilities...

Fedora 23 : xen-4.5.2-9.fc23 (2016-f4504e9445)

Qemu: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714 1296080 Qemu: i386: NULL pointer dereference in vapicwrite CVE-2016-1922 1292767 qemu: Stack-based buffer overflow in megasasctrlgetinfo CVE-2015-8613 1293305 qemu-kvm: Infinite loop and out-of-bounds transfer start i...

w-o-s.ru XSS vulnerability

Vulnerable URL: http://w-o-s.ru/search/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 5 VIP website status:| No Check w-o-s.ru SSL...

Joomla Subcategory 1.2.15 SQL Injection

| Title : Joomla comsubcategory 1.2.15 SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : http://sh.st/mGzXC ======================================================================== Sql injection :...

Oracle Linux 7 : qemu-kvm (ELSA-2016-0083)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-0083 advisory. - Resolves: bz1298047 CVE-2016-1714 qemu-kvm: Qemu: nvram: OOB r/w access in processing firmware configurations rhel-7.2.z Tenable has extracted the preceding...