what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 26 - 28 of 28

Files Date: 2016-06-28 to 2016-06-29

Craft CMS Server-Side Template Injection

Posted Jun 28, 2016

Authored by Securify B.V., Jurgen Kloosterman, Nelson Berg

Craft CMS versions prior to build 2791 suffer from a server-side template injection vulnerability.

tags | advisory

SHA-256 | d6c07b9c38fb3cfe42f98d1ca5686bfe86383f8459ba8e4a28ecb5a9583adf0b

Download | Favorite | View

Windows NtCreateProcessEx NULL Pointer Dereference

Posted Jun 28, 2016

Authored by Google Security Research, forshaw

PspInitializeFullProcessImageName does not correctly handle a NULL pointer being passed to it leading to a dereference at NULL for a file object which might be exploitable on 32 bit systems for elevation of privilege.

tags | exploit

systems | linux

SHA-256 | 70b82482716445062d80fb96e4fdd034b32b3c939d117b27406277646b4a03a2

Download | Favorite | View

Kagao 3.0 Cross Site Scripting / SQL Injection

Posted Jun 28, 2016

Authored by N4TuraL

Kagao version 3.0 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | 3441d2b7a7e0124aa7760c90c3df1efc3b9e7bd94c8da1b4064565815f2bb51b

Download | Favorite | View