what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 9 of 9

Files Date: 2020-04-10

Linux Omitted TID Increment

Posted Apr 10, 2020

Authored by Jann Horn, Google Security Research

Linux has an issue where the SLUB bulk allocation slowpath omits a required TID increment.

tags | exploit

systems | linux

SHA-256 | 14cca69626f7eaf7a068b4d1e29e645abe5f5066bfb2ea4db2fa373a5b4f17a5

Download | Favorite | View

Linux 5.3 Insecure Root Path Handling

Posted Apr 10, 2020

Authored by Jann Horn, Google Security Research

Linux versions 5.3 and above appear to have an issue where io_uring suffers from insecure handling of the root directory for path lookups.

tags | exploit, root

systems | linux

SHA-256 | ed2dd2cbf35df24e9ba5bd981126270b47009603233e401d33e76fe529690153

Download | Favorite | View

WHM 0.82.19 Cross Site Scripting

Posted Apr 10, 2020

Authored by HexraiN

WHM versions 0.82.16 through 0.82.19 suffer from multiple cross site scripting vulnerabilities.

tags | advisory, vulnerability, xss

SHA-256 | 4c6ed730776331d931c0bff8ac8006499033e5780c9e9bea6a5b4d412c7f7740

Download | Favorite | View

Xeroneit Library Management System 3.0 SQL Injection

Posted Apr 10, 2020

Authored by Sohel Yousef

Xeroneit Library Management System version 3.0 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 71f166cbbb273c3e55236ac9397db5671f85f962fa95b12afa946f7e88fae1d6

Download | Favorite | View

Windscribe 1.83 Build 20 Unquoted Service Path

Posted Apr 10, 2020

Authored by MgThuraMoeMyint

Windscribe version 1.83 Build 20 suffers from an unquoted service path vulnerability.

tags | exploit

SHA-256 | be806e1431587e76983d3ca36d5f440db9f94bbed95559f056dfe7aa5c88aa63

Download | Favorite | View

Zen Load Balancer 3.10.1 Directory Traversal

Posted Apr 10, 2020

Authored by Basim Alabdullah

Zen Load Balancer version 3.10.1 suffers from a directory traversal vulnerability. This finding was originally discovered by Cody Sixteen.

tags | exploit, file inclusion

SHA-256 | ccdc3ce93cd3d8974cf57bfec5df3f57b6b6ebe13f86825e555e497c6b5a95ac

Download | Favorite | View

AbsoluteTelnet 11.12 Denial Of Service

Posted Apr 10, 2020

Authored by chuyreds

AbsoluteTelnet version 11.12 suffers from a SSH1/username denial of service vulnerability.

tags | exploit, denial of service

SHA-256 | 0aa68fd0f3ae7cbfffe2c84e9fd400cfa57991e146345feee9514358ac8b2245

Download | Favorite | View

Azure Cloud Penetration Testing

Posted Apr 10, 2020

Authored by Haboob Team

Whitepaper called Azure Cloud Penetration Testing.

tags | paper

SHA-256 | 010abdb9fb0aade0f3069233123a715c500ef8109672854c0e91782317bdfff1

Download | Favorite | View

Photoscape Textarea Denial Of Service

Posted Apr 10, 2020

Authored by HexraiN

Photoscape versions 2.7.1 up to 3.0 suffer from a Textarea denial of service vulnerability.

tags | exploit, denial of service

SHA-256 | dd4a3fb5d476250b5210314829283aace7ad6c67f3ebdbba425ad97b3ab7f2d9

Download | Favorite | View