SAP Lumira 1.31 Cross Site Scripting
SAP Lumira version 1.31 suffers from a persistent cross site scripting vulnerability.
View ArticleArtificial Intelligence For Cybersecurity
Whitepaper called Artificial Intelligence for Cybersecurity.
View ArticleMoodle 3.8 Arbitary File Upload
Moodle version 3.8 suffers from an arbitrary file upload vulnerability.
View ArticleLaravel Administrator 4 File Upload
Laravel Administrator version 4 suffers from an unrestricted file upload vulnerability.
View ArticleWordPress Age Gate 2.13.4 Open Redirect
WordPress Age Gate plugin versions 2.13.4 and below suffer fro an open redirection vulnerability.
View ArticleWordPress Wibar Theme 1.1.8 Cross Site Scripting
WordPress Wibar theme version 1.1.8 suffers from a persistent cross site scripting vulnerability.
View ArticlePolymorph 2.0: Advanced Manipulation Of Network Traffic In Real Time
Whitepaper called Polymorph 2.0: Advanced Manipulation of Network Traffic in Real Time.
View ArticleWordPress Accesspress Social Icons Theme 1.7.9 SQL Injection
WordPress Accesspress Social Icons theme version 1.7.9 suffers from a remote SQL injection vulnerability.
View ArticleWonderCMS 3.1.3 Cross Site Scripting
WonderCMS version 3.1.3 suffers from a persistent cross site scripting vulnerability. Original finding for persistent cross site scripting in this version of WonderCMS is attributed to Hemant Patidar.
View ArticleZTE Blade Vantage Z839 Emode.APK android.uid.system Privilege Escalation
ZTE Blade Vantage Z839 Emode.APK android.uid.system local privilege escalation exploit.
View ArticleBest Support System 3.0.4 Cross Site Scripting
Best Support System version 3.0.4 suffers from a persistent cross site scripting vulnerability.
View ArticleRuckus IoT Controller 1.5.1.0.21 Remote Code Execution
Ruckus IoT Controller (Ruckus vRIoT) versions 1.5.1.0.21 and below suffer from a remote code execution vulnerability.
View ArticleHeroic Knowledge Base 3.0.1 Cross Site Scripting
Heroic Knowledge Base plugin versions 3.0.1 and below suffer from persistent cross site scripting vulnerabilities.
View ArticleUbuntu Security Notice USN-4382-2
Ubuntu Security Notice 4382-2 - It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of...
View ArticleProcess PE Injection Basics - Code Injection Series Part 1
Whitepaper called Process PE Injection Basics. This is part 1 of a 5 part series of papers.
View ArticleBypass Start Address Protection - Code Injection Series Part 2
Whitepaper called Bypass Start Address Protection. This is part 2 of a 5 part series of papers.
View ArticleExploit WNF Callback - Code Injection Series Part 3
Whitepaper called Exploit WNF Callback. This is part 3 of a 5 part series of papers.
View ArticleDisable Dynamic Code Mitigation (ACG) - Code Injection Series Part 4
Whitepaper called Disable Dynamic Code Mitigation (ACG). This is part 4 of a 5 part series of papers.
View ArticleWeaponize GhostWriting Injection - Code Injection Series Part 5
Whitepaper called Weaponize GhostWriting Injection. This is part 5 of a 5 part series of papers.
View ArticleUbuntu Security Notice USN-4649-1
Ubuntu Security Notice 4649-1 - Jens Mueller discovered that xdg-utils incorrectly handled certain URI. An attacker could possibly use this issue to expose sensitive information.
View Article