TestLink Open Source Test Management < 1.9.16 - Remote Code Execution
EDB-ID: 44226Author: Manish TanwarPublished: 2018-03-02CVE: CVE-2018-7466 Type: RemotePlatform: PHPAliases: N/AAdvisory/Source: LinkTags: N/AVulnerable App: N/A Vendor Home Page: http://testlink.org...
View ArticleApple macOS High Sierra 10.13 - 'ctl_ctloutput-leak' Information Leak
EDB-ID: 44234Author: Brandon AzadPublished: 2017-12-07CVE: CVE-2017-13868 Type: LocalPlatform: macOSAliases: ctl_ctloutput-leak.cAdvisory/Source: LinkTags: N/AVulnerable App: N/A * ctl_ctloutput-leak.c...
View ArticleCylanceSVC Anti-Tamper Bypass
CylanceSVC suffers from an anti-tamper bypass vulnerability.MD5 | 1c03266d4c2cfc883d1e8a70facc1117Download-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA512The CylanceSVC service is not sufficiently...
View ArticleSegger embOS/IP FTP Server 3.22 Denial Of Service
Segger embOS/IP FTP Server version 3.22 suffers from a denial of service vulnerability.MD5 | 674d6ed13de3b9db5b5f2c11ee037041Download[+] Credits: John Page (aka hyp3rlinx) [+] Website:...
View ArticleHPE System Management 7.6.0.11 Cross Site Scripting
HPE System Management versions 7.6.0.11 and below suffer from a cross site scripting vulnerability.MD5 | e422c7d980bf2adb577f62cec6238d07DownloadProduct: HPE System Management HomepageVersions:...
View ArticleD-Link DIR-600M Wireless Cross Site Scripting
D-Link DIR-600M Wireless suffers from a cross site scripting vulnerability.MD5 | ea2bbbcf43f73c006f55e67c4ecffbb8Download#########################################################################...
View ArticleIrfanView 4.50 SEH Unicode Buffer Overflow
IrfanView email plugin version 4.50 SEH unicode buffer overflow exploit.MD5 | 199033d2bafe2a759e8c4f3fd6f154c8Download#!/usr/bin/python## Exploit Author: bzyo# Twitter: @bzyo_# Exploit Title: IrfanView...
View ArticleIrfanView 4.44 SEH Buffer Overflow
IrfanView email plugin version 4.44 SEH buffer overflow exploit.MD5 | f189dd7231d5892f40303e7b68dd3837Download#!/usr/bin/python## Exploit Author: bzyo# Twitter: @bzyo_# Exploit Title: IrfanView 4.44...
View ArticleuWSGI Directory Traversal
uWSGI versions prior to 2.0.17 suffer from a directory traversal vulnerability.MD5 | b9abb246f21662b12371d11bb8e5a519Download# Exploit Title: uWSGI PHP Plugin Directory Traversal# Date: 01-03-2018#...
View ArticleTestLink Open Source Test Management Remote Code Execution
TestLink Open Source Test Management versions prior to 1.9.16 suffer from a remote code execution vulnerability.MD5 | 40910cbcf1e8ab75e88a90a24e42fce2Download# Title: TestLink Open Source Test...
View ArticleSuricata IDS Detection Bypass
Suricata versions prior to 4.0.4 suffer from a detection bypass vulnerability. Proof of concept exploit included.MD5 | 59dde241380c19069169e7680eeedd0fDownloadSource:packetstormsecurity.com
View ArticleDualDesk 20 Denial Of Service
DualDesk version 20 suffers from a denial of service vulnerability.MD5 | 59ec64eeacec6aea9d386384dbbb463dDownload[+] Credits: John Page (aka hyp3rlinx) [+] Website: hyp3rlinx.altervista.org[+] Source:...
View ArticleSophos UTM 9 loginuser Privilege Escalation
Sophos UTM 9 version 9.410 suffers from a loginuser privilege escalation vulnerability.MD5 | 394214076f55f7e3c334fbf415512590DownloadKL-001-2018-007 : Sophos UTM 9 loginuser Privilege Escalation via...
View ArticleOTRS Command Injection
OTRS versions 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1 suffer from remote code execution vulnerabilities.MD5 | ac1bc6a06bf339a083573a1b4efc681cDownload# Exploit Title: OTRS Authenticated file...
View ArticleChromium Incorrect Size Calculation Out-Of-Bounds Access
A Chromium incorrect size calculation when deserializing Mojo "Event" messages can lead to out-of-bounds access.MD5 | 94356d5538990c64e559c1b0258aa0c0DownloadSource:packetstormsecurity.com
View ArticleTOR Virtual Network Tunneling Tool 0.3.2.10
Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with...
View ArticleNETGEAR Magic telnetd Enabler
This Metasploit module sends a magic packet to a NETGEAR device to enable telnetd. Upon successful connect, a root shell should be presented to the user.MD5 |...
View ArticleParallels Remote Application Server 15.5 - Path Traversal
EDB-ID: 442321Author: Nicolas MarkitanisPublished: 2018-02-22CVE: CVE-2017-9447 Type: WebappsPlatform: WindowsVulnerable App: N/A # Date: 22-02-2018 # Exploit Author: Nicolas Markitanis - RUNESEC #...
View ArticlePapenmeier WiFi Baby Monitor Free & Lite < 2.02.2 - Remote Audio Record
EDB-ID: 442322Author: iamrastatingPublished: 2018-02-25CVE: CVE-2018-7661 Type: RemotePlatform: AndroidAliases: N/AAdvisory/Source: LinkTags: N/AVulnerable App: N/A Monitoring the traffic using...
View ArticleDup Scout Enterprise 10.5.12 - 'Share Username' Local Buffer Overflow
EDB-ID: 442324Author: bzyoPublished: 2018-03-05CVE: N/A Type: LocalPlatform: WindowsVulnerable App: # # Exploit Author: bzyo # Twitter: @bzyo_ # Exploit Title: Dup Scout Enterprise 10.5.12 - Local...
View Article