The Latest Infosec News, Tools, and Exploits – Got Root?
# Exploit Title: Instagram-clone Script 2.0 – Cross-Site Scripting # Date: 2018-07-10 # Exploit Author: L0RD # Vendor Homepage: https://github.com/yTakkar/Instagram-clone # Version: 2.0 # CVE: CVE-2018-13849 # Tested on: Kali linux # POC : Persistent […]
# Exploit title: D-Link DIR601 2.02NA – Credential disclosure # Date: 2018-07-10 # Exploit Author: Richard Rogerson # Vendor Homepage: http://ca.dlink.com/ # Software Link: http://support.dlink.ca/ProductInfo.aspx?m=DIR-601 # Version: <= 2.02NA # Tested on: D-Link DIR601 Firmware […]
# Exploit Title: Tor Browser – Use After Free Vulnerability # Date: 09.07.2018 # Exploit Author: t4rkd3vilz # Vendor Homepage: *https://www.torproject.org/ <https://www.torproject.org/>* # Software Link: *https://www.torproject.org/download/download-easy.html.en <https://www.torproject.org/download/download-easy.html.en>* # Version: Tor 0.3.2.x before 0.3.2.10 # Tested […]
CMSeek What CMSeek Can Do: –Basic CMS Detection of over 20 CMS –Advanced WordPress Scans —–Detects Version —–Detects Users (3 Detection Methods) —–Looks for Version Vulnerabilities and much more! –Modular bruteforce system —–Use pre made […]
[+] Credits: John Page (aka hyp3rlinx) [+] Website: hyp3rlinx.altervista.org [+] Source: http://hyp3rlinx.altervista.org/advisories/POLARISOFFICE-2017-v8-REMOTE-CODE-EXECUTION.txt [+] ISR: Apparition Security Vendor: ============= www.polarisoffice.com Product: =========== PolarisOffice 2017 v8 Polaris Document Solution is an integrated solution for corporate document life […]
# Exploit Title: Online Trade 1 – Information Disclosure # Date: 2018-07-03 # Exploit Author: L0RD # Vendor Homepage: https://codecanyon.net/item/online-trade-online-forex-and-cryptocurrency-investment-system/21987193?s_rank=14 # CVE: CVE-2018-12908 # Version: 1 # Tested on: Win 10 ======================================= # Description : […]
# Exploit Title: Unauthenticated Remote Code Evaluation in Dolibarr ERP CRM =<7.0.3 # Date: 06/29/2018 # Exploit Author: om3rcitak – https://omercitak.com # Vendor Homepage: https://dolibarr.org # Software Link: https://github.com/Dolibarr/dolibarr # Version: =<7.0.3 # Tested on: […]
# Exploit Title: DAMICMS 6.0.0 – Cross-Site Request Forgery (Add Admin) # Date: 2018-06-30 # Exploit Author: bay0net # Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9248562.html # Software Link: https://www.damicms.com/Down# # Version: DAMICMS_V6.0.0 # CVE : N/A # DamiCMS […]
# Exploit Title: Unauthenticated Command Injection vulnerability in VMware NSX SD-WAN by VeloCloud # Date: 2018-06-29 # Exploit Author: paragonsec @ Critical Start # Credit: Brian Sullivan from Tevora and Section 8 @ Critical Start […]
* Vulnerability: Authenticated Blind Command Injection * Affected Software: TP-Link TL-WR841N v13 * Affected Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n * Patched Version: None ##### Overview The ping and traceroute functionalities allow for OS […]
