The Latest Infosec News, Tools, and Exploits – Got Root?
[su_quote] # Exploit Title: WordPress Plugin Comments Import & Export < 2.0.4 – CSV Injection # Google Dork: N/A # Date: 2018-06-24 # Exploit Author: Bhushan B. Patil # Software Link: https://wordpress.org/plugins/comments-import-export-woocommerce/ # Affected Version: […]
%PDF 1 0 obj <</Pages 1 0 R /OpenAction 2 0 R>> 2 0 obj <</S /JavaScript /JS ( /* Foxit Reader Remote Code Execution Exploit ========================================== Written by: Steven Seeley (mr_me) of Source Incite […]
# Exploit Title: rtorrent 0.9.6 – Denial of Service # Date: 2018-01-10 # Exploit Author: ecx86 # Vendor Homepage: http://rtorrent.net # Software Link: https://github.com/rakshasa/rtorrent/releases # Version: <= 0.9.6 # Tested on: Debian GNU/Linux 9.4 (stretch) […]
Windows: Child Process Restriction Mitigation Bypass Platform: Windows 10 1709 (not tested other versions) Class: Security Feature Bypass Summary: It’s possible to bypass the child process restriction mitigation policy by impersonating the anonymous token leading […]
# # # # # Exploit Title: Joomla! Component Ek Rishta 2.10 – SQL Injection # Dork: N/A # Date: 08.06.2018 # Vendor Homepage: https://www.joomlaextensions.co.in/ # Software Link: https://extensions.joomla.org/extension/ek-rishta/ # Version: 2.10 # Tested on: […]
# Title: WordPress Plugin Pie Register < 3.0.9 – Blind SQL Injection # Author: Manuel García Cárdenas # Date: 2018-05-10 # Software: WordPress Plugin Pie Register 3.0.9 # CVE: CVE-2018-10969 # I. VULNERABILITY # WordPress […]
# Exploit Title: Schools Alert Management Script – SQL Injection # Date: 2018-06-07 # Vendor Homepage: https://www.phpscriptsmall.com/ # Software Link: https://www.phpscriptsmall.com/product/schools-alert-management-system/ # Category: Web Application # Exploit Author: M3@Pandas # Web: https://github.com/unh3x/just4cve/issues/2 # Tested on: […]
# Exploit Title: Joomla! Component EkRishta 2.10 – ‘username’ SQL Injection # Date: 2018-06-11 # Exploit Author: L0RD # Software Link: https://extensions.joomla.org/extension/ek-rishta/ # Vendor Homepage: https://www.joomlaextensions.co.in/ # Version: 2.10 # Tested on: Win 10 # […]
# Title: Canon PrintMe EFI – Cross-Site Scripting # Date: 9.6.2018-06-09 # Exploit Author: Huy Kha # Vendor Homepage: [https://www.efi.com/] # Version: Canon PrintMe EFI # Tested on: Mozilla FireFox # CVE: CVE-2018-12111 # XSS […]
# Exploit Title: SearchBlox 8.6.7 Out-Of-Band XML eXternal Entity (OOB-XXE) # Exploit Author: Ahmet GUREL, Canberk BOLAT # Software Link: https://www.searchblox.com/ # Version: < = SearchBlox Version 8.6.7 # Platform: Java # Tested on: Windows […]
