The Latest Infosec News, Tools, and Exploits – Got Root?
# Exploit Title: Davolink DVW 3200 Router – Password Disclosure # Google Dork: N/A # Zoomeye dork : https://www.zoomeye.org/searchResult?q=%22var%20user_passwd%22%20%2Bapp%3A%22DAVOLINK%20GAPD-7000%20WAP%20httpd%22 # Date: 2018-07-13 # Exploit Author: Ankit Anubhav # Vendor Homepage: www.davolink.co.kr # Software Link: N/A […]
# Title: Windows Speech Recognition- Buffer Overflow # Author: Nassim Asrir # Contact: wassline@gmail.com | https://www.linkedin.com/in/nassim-asrir-b73a57122/ # Vendor: https://www.microsoft.com/ About Windows Speech Recognition: ================================= Windows Speech Recognition lets you control your PC by voice alone, […]
CMS Made Simple version 2.2.5 allows an authenticated administrator to upload a file and rename it to have a .php extension. The file can then be executed by opening the URL of the file in […]
# Exploit Title: WordPress Plugin All In One Favicon <= 4.6 – Authenticated Multiple XSS Persistent # Date: 2018-07-10 # Exploit Author: Javier Olmedo # Website: https://hackpuntes.com/ # Vendor Homepage: http://www.techotronic.de/ # Software Link: https://wordpress.org/plugins/all-in-one-favicon/ […]
# Exploit Title: MyBB New Threads Plugin – Cross-Site Scripting # Date: 7/16/2018 # Author: 0xB9 # Twitter: @0xB9Sec # Contact: 0xB9[at]pm.me # Software Link: https://community.mybb.com/mods.php?action=view&pid=1143 # Version: 1.1 # Tested on: Ubuntu 18.04 # […]
# Exploit Title: FTP2FTP 1.0 – Arbitrary File Download # Dork: N/A # Date: 18.07.2018 # Exploit Author: Özkan Mustafa Akkuş (AkkuS) # Vendor Homepage: https://codecanyon.net/item/ftp2ftp-server-to-server-file-transfer-php-script/21972395 # Version: 1.0 # Category: Webapps # Tested on: […]
# Exploit Title: WordPress Plugin Job Manager v4.1.0 Stored Cross Site Scripting # Google Dork: N/A # Date: 2018-07-15 # Exploit Author: Berk Dusunur & Selimcan Ozdemir # Vendor Homepage: https://wpjobmanager.com # Software Link: https://downloads.wordpress.org/plugin/wp-job-manager.latest-stable.zip […]
# Exploit Title: Instagram-clone Script 2.0 – Cross-Site Scripting # Date: 2018-07-10 # Exploit Author: L0RD # Vendor Homepage: https://github.com/yTakkar/Instagram-clone # Version: 2.0 # CVE: CVE-2018-13849 # Tested on: Kali linux # POC : Persistent […]
# Exploit title: D-Link DIR601 2.02NA – Credential disclosure # Date: 2018-07-10 # Exploit Author: Richard Rogerson # Vendor Homepage: http://ca.dlink.com/ # Software Link: http://support.dlink.ca/ProductInfo.aspx?m=DIR-601 # Version: <= 2.02NA # Tested on: D-Link DIR601 Firmware […]
# Exploit Title: Tor Browser – Use After Free Vulnerability # Date: 09.07.2018 # Exploit Author: t4rkd3vilz # Vendor Homepage: *https://www.torproject.org/ <https://www.torproject.org/>* # Software Link: *https://www.torproject.org/download/download-easy.html.en <https://www.torproject.org/download/download-easy.html.en>* # Version: Tor 0.3.2.x before 0.3.2.10 # Tested […]
