22 matches found
xwf-yara-scanner
Overview This X-Ways Forensics X-Tension allows the use of YARA within X-Ways natively. It uses both the X-Ways Forensics API and the YARA API to achieve this. Note: This is an open source project, not a formal CrowdStrike product. There are many benefits to running YARA within X-Ways, versus...
XWFAcropalypse
Acropalypse（CVE-2023-21036）は、Google Pixel の Markup ツールと Windows の Snip & Sketch に存在するセキュリティ脆弱性で、PNG スクリーンショットからトリミングや編集で除去されたデータを復元できるものです。 2023年に発見され、攻撃者が元の画像を再構築できるようになり、ユーザーが元のファイルを上書き保存した場合でも、機密性の高い未公開情報が露出する可能性があります。 この X-Ways Forensics（XWF）拡張機能は、この脆弱性を持つ画像ファイルを検出し、ファイルを「notable」としてマークします。...
X-Ways Winhex 缓冲区错误漏洞
X-Ways Winhex is a general-purpose hex editor for files, disks, and RAM from X-Ways. A buffer error vulnerability exists in X-Ways Winhex versions 16.1 SR-1 and 20.4, which stems from a buffer overflow that controls the Structured Exception Handler register, which could allow an attacker to execu...
The Legacy of a Security Breach
By Daily Contributors Today over at Resonance Security I am going to look at one of the more unusual ways in… This is a post from HackRead.com Read the original post: The Legacy of a Security Breach...
Managing Cyber Risk for Under-Pressure CISOs
Overworked CISOs are struggling to deliver the cybersecurity results their organizations expect. Fortunately, there are concrete and practical ways they can make their lives easier—while managing cyber risk effectively...
Real Estate CRM Pro 5.7 SQL Injection
==================================================================================================================================== | Title : Real Estate CRM Pro v 5.7 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-b...
realartways.org Cross Site Scripting vulnerability OBB-2504586
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Top 3 Ways to Find a Hidden File on a Mac
By Waqas Mac computers often have hidden files that you can’t see. Find out the practical ways to find and view the articles with ease in this article. This is a post from HackRead.com Read the original post: Top 3 Ways to Find a Hidden File on a Mac...
Innovative Ways Customers Compute on the Edge
Moving everything closer to the edge is the key to delivering better, faster experiences to people through billions of devices around the world...
CVE-2020-29510
The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications...
realartways.org Cross Site Scripting vulnerability OBB-1257516
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Hacking Spotify
Some of the ways artists are hacking the music-streaming service Spotify...
Unpatched SMB Zero Day Easily Exploitable
In what’s turning out to be the zero day that keeps on giving, researchers are still finding ways to exploit an unpatched denial of service vulnerability that exists in the way Windows implements the Server Message Block protocol. Details around the bug aren’t a mystery. Laurent Gaffié, the...
OpenDoor - OWASP Directory Access Scanner
This application scans the site directories and find all possible ways to login, empty directories and entry points. Scans conducted in the dictionary that is included in this application. This software is written for informational purposes and is an open source product under the GPL license...
Fun Ways to Think - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Fun Ways to Think published at the 'play' market has multiple vulnerabilities...
Die in 100 Ways - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Die in 100 Ways published at the 'play' market has multiple vulnerabilities...
Joomla MyDynGallery SQL Injection
Joomla! commydyngallery Automatic SQL Injection exploit multiple ways Author: D35m0nd142 Google Dork: inurl:"index.php?option=commydyngallery" Date: 12/12/2015 Vulns found by R3d.W0rm & H3ll-dz Software link: https://www.joomla.org Tested on: all Joomla! versions containing component mydyngallery...
Net Ways CMS SQL Injection
?? Exploit Title : Net Ways Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.netways.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Designed & develop...
PHP-Fusion-AP-7.00.2-Rus (search.php) disclosure ways
Exploit for unknown platform in category web applications ===================================================== PHP-Fusion-AP-7.00.2-Rus search.php disclosure ways ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...
Oracle XML DB SID Discovery
This module simply makes an authenticated request to retrieve the sid from the Oracle XML DB httpd server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle XML DB SID Discovery',...