The Latest Infosec News, Tools, and Exploits – Got Root?
The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aids penetration testing operations: [*]exploits – modules that take advantage of identified vulnerabilities [*]creds – modules designed […]
Title: Dell OpenManage Network Manager Multiple Vulnerabilities Advisory ID: KL-001-2018-009 Publication Date: 2018.11.05 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2018-009.txt 1. Vulnerability Details Affected Vendor: Dell Affected Product: OpenManage Network Manager Affected Version: 6.2.0.51 SP3 Platform: Embedded Linux CWE […]
# Exploit Title: OOP CMS BLOG 1.0 – ‘search’ SQL Injection # Dork: N/A # Date: 2018-11-06 # Exploit Author: Ihsan Sencan # Vendor Homepage: http://zsoft.com.bd/ # Software Link: https://datapacket.dl.sourceforge.net/project/php-oop-cms-blog/blog_fo_rup.zip # Version: 1.0 # Category: […]
# Exploit Title: Mongo Web Admin 6.0 – Information Disclosure # Dork: N/A # Date: 2018-11-04 # Exploit Author: Ihsan Sencan # Vendor Homepage: http://www.mongoadmin.org/ # Software Link: https://netix.dl.sourceforge.net/project/mongo-web-admin/mongoDesktopAdminSetup-beta-6.exe # Version: 6.0 # Category: Webapps […]
# Exploit Title: Apache OFBiz 16.11.04 – XML External Entity Injection # Date: 2018-10-15 # Exploit Author: Jamie Parfet # Vendor Homepage: https://ofbiz.apache.org/ # Software Link: https://archive.apache.org/dist/ofbiz/ # Version: < 16.11.04 # Tested on: Ubuntu […]
# Exploit Title: Windows 10 UAC Bypass by computerDefault # Date: 2018-10-18 # Exploit Author: Fabien DROMAS – Security consultant @ Synetis # Twitter: st0rnpentest # # Vendor Homepage: www.microsoft.com # Version: Version 10.0.17134.285 # […]
libSSH – Authentication Bypass [su_quote] #!/usr/bin/env python3 import paramiko import socket import argparse from sys import argv, exit parser = argparse.ArgumentParser(description=”libSSH Authentication Bypass”) parser.add_argument(‘–host’, help=’Host’) parser.add_argument(‘-p’, ‘–port’, help=’libSSH port’, default=22) parser.add_argument(‘-log’, ‘–logfile’, help=’Logfile to write […]
# Exploit Title: LayerBB Forum 1.1.1 – ‘search_query’ SQL Injection # Exploit Author: Ihsan Sencan # Dork: N/A # Date: 2018-10-04 # Vendor Homepage: https://layerbb.com/ # Software Link: https://demo.layerbb.com/ # Version: 1.1.1 # Category: Webapps […]
# Title: NICO-FTP 3.0.1.19 – Buffer Overflow (SEH)(ASLR) # Date: 2018-10-04 # Platforms: Windows # Author: Miguel Mendez Z # Vendor: Nico-FTP # Version: 3.0.1.19 # Tested on: Windows XP_sp3 [es]/ Windows 7_x86 [eng] [su_quote] […]
1. Content process -> Privileged content process (first_stage.js) When spawning a new Edge content process, its privilege is determined by its URL. This URL check is performed by the LCIEUrlPolicy::GetPICForPrivilegedInternalPage method in eModel.dll. The method […]
