Accéder au contenu principal

Wordpress blog about …. My discoveries on Web … I don't know if it's great but it's mine… Security Linux etc…

A.Riccobene, security evangelist, security addict, a man who humbly participating in knowledge.

Catégorie : reverse

GitHub – RPISEC/MBE: Course materials for Modern Binary Exploitation by RPISEC

Source : GitHub – RPISEC/MBE: Course materials for Modern Binary Exploitation by RPISEC

ariccobene
26/06/2017

reverse

Rechercher :

Articles récents

GitHub – RPISEC/MBE: Course materials for Modern Binary Exploitation by RPISEC
View HTTP Request and Response Header
Commandes OpenSSL – Commandes de Conversion, Commandes de Vérification
abatchy’s blog
ptf/README.md at master · trustedsec/ptf · GitHub

Archives

juin 2017
mai 2017
avril 2017
mars 2017
février 2017
janvier 2017
décembre 2016
novembre 2016
octobre 2016
septembre 2016
août 2016
décembre 2015
juillet 2015
octobre 2014
septembre 2014
août 2014
juillet 2014
mars 2014
novembre 2013
octobre 2013
septembre 2013
août 2013
juillet 2013
juin 2013

Catégories

Challenge_CTF_other
Cluster
Code
Cryptographie
Git
Liens – bookmarks
Linux – OS Unix
Music – audio
OpenSource
OWASP tools
reverse
Security – hack – pentest
SSL
Technology intelligence
Tools
Training security
Uncategorized
Visuel – image – photo – design
vulnerability

Méta

Inscription
Connexion
Flux RSS des articles
RSS des commentaires
WordPress.com

AllInOne CVS security : http://www.cvedetails.com/

CVE-2015-2790 30/03/2015
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image. (CVSS:4.3) (Last Update:2016-12-02)
CVE-2015-2789 30/03/2015
Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder. (CVSS:4.4) (Last Update:2016-12-02)
CVE-2015-2701 25/03/2015
Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests that change a user password via a request to profiles-update/. (CVSS:6.8) (Last Update:2016-12-02)
CVE-2015-2680 23/03/2015
Cross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request in the users page to gxadmin/index.php. (CVSS:6.8) (Last Update:2016-12-02)
CVE-2015-2679 23/03/2015
Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php or (2) username parameter to gxadmin/login.php. (CVSS:7.5) (Last Update:2016-12-02)
CVE-2015-2678 23/03/2015
Multiple cross-site scripting (XSS) vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter in the categories page to gxadmin/index.php or (2) page parameter to index.php. (CVSS:4.3) (Last Update:2016-12-02)
CVE-2015-2564 20/03/2015
SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to users-edit.php. (CVSS:6.5) (Last Update:2015-03-23)
CVE-2015-2275 12/03/2015
Cross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parameters[data][7][title] parameter in a saveImageData action to index.php/AJAXProxy. (CVSS:4.3) (Last Update:2016-12-02)
CVE-2015-2218 05/03/2015
Multiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in wonderpluginaudio.php in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) item[name] or (2) item[customcss] parameter in a wonderplugin_audio_save_item action to wp-admin/admin-ajax.ph […]
CVE-2015-2216 05/03/2015
SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prod_id parameter. (CVSS:7.5) (Last Update:2016-12-02)

cxsecurity.com

SKH - W3Layouts CMS SQLi Vulnerability 22/07/2017
Topic: SKH - W3Layouts CMS SQLi Vulnerability Risk: Medium Text:+++++++++++++++++++++++++ Google Dork : intext:"Designed by SKH - W3Layouts"" Tested on : Windows - Havij 1.16 Pro ********...
VICIdial user_authorization Unauthenticated Command Execution 22/07/2017
Topic: VICIdial user_authorization Unauthenticated Command Execution Risk: High Text:## # This module requires Metasploit: http://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-f...
Easy Chat Server User Registeration Buffer Overflow 22/07/2017
Topic: Easy Chat Server User Registeration Buffer Overflow Risk: High Text:## # This module requires Metasploit: http://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-f...
IPFire proxy.cgi Remote Code Execution 22/07/2017
Topic: IPFire proxy.cgi Remote Code Execution Risk: High Text:## ## This module requires Metasploit: http://metasploit.com/download ## Current source: https://github.com/rapid7/metasploit...
Virtual Postage (VPA) 1.0 Man-In-The-Middle Code Execution 22/07/2017
Topic: Virtual Postage (VPA) 1.0 Man-In-The-Middle Code Execution Risk: Medium Text:# Exploit Title: Virtual Postage (VPA) - Remote Code Execution via MITM # Date: 20/Jul/17 # Exploit Author: MaXe # Vendor Ho...

Commentaires récents

Créez un site Web ou un blog gratuitement sur WordPress.com.