exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Matei Josephs

Diebold Nixdorf Vynamic View Console 5.3.1 DLL Hijacking

Posted Aug 4, 2023

Authored by Matei Josephs

An issue in Diebold Nixdorf Vynamic View Console versions 5.3.1 and below allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature.

tags | exploit, arbitrary, local

systems | windows

advisories | CVE-2023-36344

SHA-256 | e8ca12d6b8563b69ab66a6e4e43f64fa33eef9148ba6d2ac5f95576df569a4e6

Download | Favorite | View

FICO Origination Manager Decision Module 4.8.1 XSS / Session Hijacking

Posted May 8, 2023

Authored by Matei Josephs

Multiple persistent cross site scripting vulnerabilities in FICO Origination Manager Decision Module version 4.8.1 allow an attacker to execute code in the context of the victim's browser using a crafted payload. Additionally, an attacker with initial access to the application, can get the JSESSIONID cookie of another user and take over their session. These two findings can be chained together.

tags | exploit, vulnerability, xss

advisories | CVE-2023-30056, CVE-2023-30057

SHA-256 | 27679f4bfde5c9377efad490bf7207a9b6f587632600f7b21edcff5a9651ed7f

Download | Favorite | View