Debut Embedded httpd 1.20 Denial Of Service
The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying with an HTTP 500...
View ArticleWordPress UserPro 4.6.17 Authentication Bypass
WordPress Userpro plugin versions 4.9.17 and below suffer from an authentication bypass vulnerability.
View Articlemkvalidator 0.5.1 Denial Of Service
mkvalidator version 0.5.1 suffers from multiple denial of service vulnerabilities leveraging libebml2 and mkclean.
View ArticleLogitech Media Server 7.9.0 Cross Site Scripting
Logitech Media Server version 7.9.0 suffers from multiple cross site scripting vulnerabilities.
View ArticlepfSense 2.3.1_1 Post-Authentication Command Execution
pfSense versions 2.3.1_1 and below suffers from a post authentication command execution vulnerability.
View ArticleDebian Security Advisory 4020-1
Debian Linux Security Advisory 4020-1 - Several vulnerabilities have been discovered in the chromium web browser.
View ArticleActiontec C1000A Modem Backdoor Account
The Actiontec C1000A modem has a hard-coded backdoor admin account.
View ArticleLinux Kernel 4.1.3 (Ubuntu 17.10) waitid() SMEP/SMAP Privilege Escalation
This is a proof of concept exploit for the waitid bug introduced in version 4.13 of the Linux kernel. It can be used to break out of sandboxes such as that in Google Chrome.
View ArticleHashcat Advanced Password Recovery 4.0.1 Binary Release
Hashcat is an advanced GPU hash cracking utility that includes the World's fastest md5crypt, phpass, mscash2 and WPA / WPA2 cracker. It also has the first and only GPGPU-based rule engine, focuses on...
View ArticleHashcat Advanced Password Recovery 4.0.1 Source Code
Hashcat is an advanced GPU hash cracking utility that includes the World's fastest md5crypt, phpass, mscash2 and WPA / WPA2 cracker. It also has the first and only GPGPU-based rule engine, focuses on...
View ArticleWordPress Duplicator Migration 1.2.28 Cross Site Scripting
WordPress Duplicator Migration plugin version 1.2.28 suffers from a cross site scripting vulnerability.
View ArticleRed Hat Security Advisory 2017-3141-01
Red Hat Security Advisory 2017-3141-01 - The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an...
View ArticleRed Hat Security Advisory 2017-3151-01
Red Hat Security Advisory 2017-3151-01 - Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 62.0.3202.89. Security Fix: Multiple flaws were found in the...
View ArticleDebian Security Advisory 4021-1
Debian Linux Security Advisory 4021-1 - It was discovered that missing input validation in the Open Ticket Request System could result in privilege escalation by an agent with write permissions for...
View Article
