what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Russell Butturini

Equibase.com HTML Injection

Posted Feb 3, 2016

Authored by Russell Butturini

Equibase.com suffers from an html injection vulnerability that may allow for cross site scripting.

tags | exploit, xss

SHA-256 | db68a1e8b0bb1bf6362553c52c19c3c19de118c927925dbc15bbf4ffd8f8df6c

Download | Favorite | View

VxWorks R5_0_31 Data Disclosure

Posted Jun 4, 2013

Authored by Russell Butturini

The 3Com NBX V3000 phone system firmware was found to have the VxWorks remote debug service enabled. This allows for remotely extracting the contents of device memory over the network. When parsing the contents of memory, it was discovered that the call logs for the system as well as URLs which linked to WAV files containing voice mails that were accessible.

tags | exploit, remote, info disclosure

SHA-256 | 83f9bcf13390d5de35a662b882d55f84b95389bbc98e486345a8b9bca583fb12

Download | Favorite | View