science and technology

Qik Chat 3.0 Command Injection

Qik Chat version 3.0 for iOS suffers from a command injection vulnerability.




science and technology

Service Tracing Privilege Escalation

This Metasploit module leverages a trusted file overwrite with a dll hijacking vulnerability to gain SYSTEM-level access on vulnerable Windows 10 x64 targets.




science and technology

Microsoft Windows NtUserMNDragOver Local Privilege Escalation

This Metasploit module exploits a NULL pointer dereference vulnerability in MNGetpItemFromIndex(), which is reachable via a NtUserMNDragOver() system call. The NULL pointer dereference occurs because the xxxMNFindWindowFromPoint() function does not effectively check the validity of the tagPOPUPMENU objects it processes before passing them on to MNGetpItemFromIndex(), where the NULL pointer dereference will occur. This module has been tested against Windows 7 x86 SP0 and SP1. Offsets within the solution may need to be adjusted to work with other versions of Windows, such as Windows Server 2008.





























science and technology

Addressing Supply-Chain Risk Starts With People, Says Microsoft






science and technology

The Best And Worst Of Black Hat 2019





science and technology

We Asked Def Con Attendees Why People Are Still Getting Hacked