w

Ubiquiti Networks UniFi Cloud Key Command Injection / Privilege Escalation

Ubiquiti Networks UniFi Cloud Key with firmware versions 0.5.9 and 0.6.0 suffer from weak crypto, privilege escalation, and command injection vulnerabilities.




w

Key Reinstallation: Forcing Nonce Reuse In WPA2

Whitepaper called Reinstallation Attacks: Forcing Nonce Reuse in WPA2. This research paper will be presented on at the Computer and Communications Security (CCS) conference on November 1, 2017. This paper details a flaw in the WPA2 protocol itself and most devices that makes use of WPA2 are affected.




w

RSA BSAFE Micro Edition Suite / Crypto-C Micro Edition Overflow / DoS

RSA BSAFE Micro Edition Suite and Crypto-C Micro Edition suffer from resource exhaustion, integer overflow, improper clearing of heap memory, covert timing channel, and buffer over-read vulnerabilities.




w

Apache2 Web Server Hardening Article

This is an article discussing Apache2 Web Server hardening. Written in Turkish.










w

WhatsApp Axes COVID-19 Mass Message Forwarding




w

Windows/x86 Dynamic Bind Shell / Null-Free Shellcode

571 bytes small Microsoft Windows x86 dynamic bind shell and null-free shellcode.




w

Windows/x86 Null Free WinExec Calc.exe Shellcode

195 bytes small Windows/x86 null-free WinExec Calc.exe shellcode.




w

Dynamic MessageBoxA||W PEB And Import Table Method Shellcode

232 bytes small Dynamic MessageBoxA||W PEB and Import Table Method shellcode.




w

WinExec Add-Admin Dynamic Null-Free Shellcode

210 bytes small WinExec add-admin dynamic null-free shellcode.




w

Linux Password Protected Bindshell Shellcode

272 bytes small Linux/x86_64 null free password protected bindshell shellcode.






w

All Phones In India To Be Equipped With Panic Buttons From 2017






w

Scam Call Center Owner In Custody After BBC Investigation








w

Google Launches Coronavirus Website In The United States




w

Google Data Shines Light On Whether Coronavirus Lockdowns Worldwide Are Working





w

Citrix Application Delivery Controller / Gateway Remote Code Execution / Traversal

Citrix Application Delivery Controller and Citrix Gateway directory traversal remote code execution exploit.




w

Huawei HG255 Directory Traversal

This Metasploit module exploits a directory traversal in Huawei HG255.




w

Citrix ADC / Gateway Path Traversal

This is an nmap nse script to test for the path traversal vulnerability in Citrix Application Delivery Controller (ADC) and Gateway.




w

Romanian Hacking Group Downs Tools







w

DNS Servers Filled With Wrong Kool-Aid In Romania











w

Newbie CMS Insecure Cookie Handling

Newbie CMS suffers from an insecure cookie handling vulnerability.




w

CuteNews 1.4.6 Insecure Cookie Handling

CuteNews version 1.4.6 suffers from an insecure cookie handling vulnerability.




w

Memorial Web Site Script Password Reset / Insecure Cookie

Memorial Web Site Script suffers from password reset and insecure cookie handling vulnerabilities.




w

[whem]-UPLoad 7.0 Insecure Cookie

[whem]-UPLoad version 7.0 suffers from an insecure cookie handling vulnerability.




w

xWeblog 2.2 Insecure Cookie Handling

xWeblog version 2.2 suffers from an insecure cookie handling vulnerability.




w

WikiWebHelp 0.3.3 Insecure Cookie Handling

WikiWebHelp version 0.3.3 suffers from an insecure cookie handling vulnerability.