The Latest Infosec News, Tools, and Exploits – Got Root?
# Title: ASUS-DSL N10 1.1.2.2_17 – Authentication Bypass # Author: AmnBAN team # Date: 2018-08-06 # Vendor Homepage: https://www.asus.com/Networking/DSLN10_C1_with_5dBi_antenna/ # Sofrware version: 1.1.2.2_17 # CVE: N/A # 1. Description: # In ASUS-DSL N10 C1 modem […]
# Exploit Title: ASUS DSL-N12E_C1 1.1.2.3_345 – Remote Command Execution # Date: 2018-08-02 # Exploit Author: Fakhri Zulkifli (@d0lph1n98) # Vendor Homepage: https://www.asus.com/ # Software Link: https://www.asus.com/Networking/DSLN12E_C1/HelpDesk_BIOS/ # Version: 1.1.2.3_345 # Tested on: 1.1.2.3_345\ Method […]
This module exploits a vulnerability in SonicWall Global Management System Virtual Appliance versions 8.1 (Build 8110.1197) and below. This virtual appliance can be downloaded from http://www.sonicwall.com/products/sonicwall-gms/ and is used ‘in a holistic way to manage […]
# Exploit Title: Davolink DVW 3200 Router – Password Disclosure # Google Dork: N/A # Zoomeye dork : https://www.zoomeye.org/searchResult?q=%22var%20user_passwd%22%20%2Bapp%3A%22DAVOLINK%20GAPD-7000%20WAP%20httpd%22 # Date: 2018-07-13 # Exploit Author: Ankit Anubhav # Vendor Homepage: www.davolink.co.kr # Software Link: N/A […]
# Title: Windows Speech Recognition- Buffer Overflow # Author: Nassim Asrir # Contact: wassline@gmail.com | https://www.linkedin.com/in/nassim-asrir-b73a57122/ # Vendor: https://www.microsoft.com/ About Windows Speech Recognition: ================================= Windows Speech Recognition lets you control your PC by voice alone, […]
CMS Made Simple version 2.2.5 allows an authenticated administrator to upload a file and rename it to have a .php extension. The file can then be executed by opening the URL of the file in […]
# Exploit Title: WordPress Plugin All In One Favicon <= 4.6 – Authenticated Multiple XSS Persistent # Date: 2018-07-10 # Exploit Author: Javier Olmedo # Website: https://hackpuntes.com/ # Vendor Homepage: http://www.techotronic.de/ # Software Link: https://wordpress.org/plugins/all-in-one-favicon/ […]
# Exploit Title: MyBB New Threads Plugin – Cross-Site Scripting # Date: 7/16/2018 # Author: 0xB9 # Twitter: @0xB9Sec # Contact: 0xB9[at]pm.me # Software Link: https://community.mybb.com/mods.php?action=view&pid=1143 # Version: 1.1 # Tested on: Ubuntu 18.04 # […]
# Exploit Title: FTP2FTP 1.0 – Arbitrary File Download # Dork: N/A # Date: 18.07.2018 # Exploit Author: Özkan Mustafa Akkuş (AkkuS) # Vendor Homepage: https://codecanyon.net/item/ftp2ftp-server-to-server-file-transfer-php-script/21972395 # Version: 1.0 # Category: Webapps # Tested on: […]
# Exploit Title: WordPress Plugin Job Manager v4.1.0 Stored Cross Site Scripting # Google Dork: N/A # Date: 2018-07-15 # Exploit Author: Berk Dusunur & Selimcan Ozdemir # Vendor Homepage: https://wpjobmanager.com # Software Link: https://downloads.wordpress.org/plugin/wp-job-manager.latest-stable.zip […]
