blackhatsec-blog - Tumblr blog

[blackhatsec-blog]

#0daytoday #phpMars 1.0.9 Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

Things you should know about 0day.today:

We use one main domain: http://0day.today

Most of the materials is completely FREE

If you want to purchase the exploit / get V.I.P. access or pay for any other service, you need to buy or earn GOLD

We accept currencies: [contact admin to find more] We don’t want you to use our site as a tool for hacking purposes, so any kind of action that could…

[blackhatsec-blog]

#0daytoday #Online Hotel Booking System Pro 1.3 Cross Site Scripting Vulnerability [#0day #Exploit]

Things you should know about 0day.today:

We use one main domain: http://0day.today

Most of the materials is completely FREE

If you want to purchase the exploit / get V.I.P. access or pay for any other service, you need to buy or earn GOLD

We accept currencies: [contact admin to find more] We don’t want you to use our site as a tool for hacking purposes, so any kind of action that could…

[blackhatsec-blog]

#0daytoday #Roommate And Real Estate Listing Classified Response 1.0 XSS Vulnerability [#0day #Exploit]

Things you should know about 0day.today:

We use one main domain: http://0day.today

Most of the materials is completely FREE

If you want to purchase the exploit / get V.I.P. access or pay for any other service, you need to buy or earn GOLD

We accept currencies: [contact admin to find more] We don’t want you to use our site as a tool for hacking purposes, so any kind of action that could…

[blackhatsec-blog]

#0daytoday #Xbox 360 Aurora 0.6b Default Credentials / FTP BruteForce Exploit [remote #exploits #0day #Exploit]

Things you should know about 0day.today:

We use one main domain: http://0day.today

Most of the materials is completely FREE

If you want to purchase the exploit / get V.I.P. access or pay for any other service, you need to buy or earn GOLD

We accept currencies: [contact admin to find more] We don’t want you to use our site as a tool for hacking purposes, so any kind of action that could…

[blackhatsec-blog]

#0daytoday #Netcore / Netis Routers - UDP Backdoor Exploit [remote #exploits #0day #Exploit]

#0daytoday #Netcore / Netis Routers – UDP Backdoor Exploit [remote #exploits #0day #Exploit]

Things you should know about 0day.today:

We use one main domain: http://0day.today

Most of the materials is completely FREE

If you want to purchase the exploit / get V.I.P. access or pay for any other service, you need to buy or earn GOLD

We accept currencies: [contact admin to find more] We don’t want you to use our site as a tool for hacking purposes, so any kind of action that could…

[blackhatsec-blog]

Google Play Removes 22 Malicious ‘LightsOut’ Apps From Marketplace

Nearly two dozen Android flashlight and related utility apps were removed from the Google Play marketplace after researchers found a malicious advertising component dubbed “LightsOut” inside them. In total, the apps were downloaded between 1.5 and 7.5 million times.

Security researchers at Check Point researcher discovered the family of malicious apps that “generated illegal ad revenue” via…

[blackhatsec-blog]

AWS infrastructure Security Auditing: Cloud Security Suite

CS Suite is a one stop tool for auditing the security posture of the AWS infrastructure and does system audits as well. CS Suite leverages current open source tools capabilities and has other missing checks added into one tool to rule them all.

The major features include:

Simple installation with support of python virtual environment and docker containers

Initiate all tools/audit checks in one…

[blackhatsec-blog]

The Automated Collection and Enrichment Platform: ACE

The Automated Collection and Enrichment (ACE) platform is a suite of tools for threat hunters to collect data from many endpoints in a network and automatically enrich the data. The data is collected by running scripts on each computer without installing any software on the target. ACE supports collecting from Windows, macOS, and Linux hosts.

ACE is meant to simplify the process of remotely…

[blackhatsec-blog]

#0daytoday #Technicolor DPC3928SL - SNMP Authentication Bypass Exploit [remote #exploits #0day #Exploit]

#0daytoday #Technicolor DPC3928SL – SNMP Authentication Bypass Exploit [remote #exploits #0day #Exploit]

Things you should know about 0day.today:

We use one main domain: http://0day.today

Most of the materials is completely FREE

If you want to purchase the exploit / get V.I.P. access or pay for any other service, you need to buy or earn GOLD

We accept currencies: [contact admin to find more] We don’t want you to use our site as a tool for hacking purposes, so any kind of action that could…

[blackhatsec-blog]

#0daytoday #Fortinet FortiGate 4.x < 5.0.7 - SSH Backdoor Exploit [remote #exploits #0day #Exploit]

#0daytoday #Fortinet FortiGate 4.x

Things you should know about 0day.today:

We use one main domain: http://0day.today

Most of the materials is completely FREE

If you want to purchase the exploit / get V.I.P. access or pay for any other service, you need to buy or earn GOLD

We accept currencies: [contact admin to find more] We don’t want you to use our site as a tool for hacking purposes, so any kind of action that could…

[blackhatsec-blog]

#0daytoday #Ruby < 2.2.8 / < 2.3.5 / < 2.4.2 / < 2.5.0- [#0day #Exploit]

Things you should know about 0day.today:

We use one main domain: http://0day.today

Most of the materials is completely FREE

If you want to purchase the exploit / get V.I.P. access or pay for any other service, you need to buy or earn GOLD

We accept currencies: [contact admin to find more] We don’t want you to use our site as a tool for hacking purposes, so any kind of action that could…

[blackhatsec-blog]

#0daytoday #Linux Kernel >= 4.9 eBPF memory corruption bugs Vulnerability [#0day #Exploit]

Things you should know about 0day.today:

We use one main domain: http://0day.today

Most of the materials is completely FREE

If you want to purchase the exploit / get V.I.P. access or pay for any other service, you need to buy or earn GOLD

We accept currencies: [contact admin to find more] We don’t want you to use our site as a tool for hacking purposes, so any kind of action that could…

[blackhatsec-blog]

Vendors Share Patch Updates on Spectre and Meltdown Mitigation Efforts

Intel, Amazon, ARM, Microsoft and others are playing down concerns over the impact of the massive Spectre and Meltdown vulnerabilities affecting computers, servers and mobile devices worldwide.

The two flaws, Spectre and Meltdown, are far reaching and impact a wide range of microprocessors used in the past decade in computers and mobile devices including those running Android, Chrome, iOS,…

[blackhatsec-blog]

#0daytoday #Palo Alto Networks PAN-OS Cookie Injection Vulnerability CVE-2017-15944 [webapps #exploits #Vulnerability #0day #Exploit]

Things you should know about 0day.today:

We use one main domain: http://0day.today

Most of the materials is completely FREE

If you want to purchase the exploit / get V.I.P. access or pay for any other service, you need to buy or earn GOLD

We accept currencies: [contact admin to find more] We don’t want you to use our site as a tool for hacking purposes, so any kind of action that could…

[blackhatsec-blog]

#0daytoday #WordPress Itinerary 1.0.0 Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

Things you should know about 0day.today:

We use one main domain: http://0day.today

Most of the materials is completely FREE

If you want to purchase the exploit / get V.I.P. access or pay for any other service, you need to buy or earn GOLD

We accept currencies: [contact admin to find more] We don’t want you to use our site as a tool for hacking purposes, so any kind of action that could…

[blackhatsec-blog]

#0daytoday #WordPress WebConnex Form Management 1.6.3 Cross Site Scripting Vulnerability [#0day #Exploit]

Things you should know about 0day.today:

We use one main domain: http://0day.today

Most of the materials is completely FREE

If you want to purchase the exploit / get V.I.P. access or pay for any other service, you need to buy or earn GOLD

We accept currencies: [contact admin to find more] We don’t want you to use our site as a tool for hacking purposes, so any kind of action that could…

[blackhatsec-blog]

Intel In Security Hot Seat Over Reported CPU Design Flaw

UPDATE

Intel is grappling with what many experts are describing as a processor design flaw impacting CPUs used in Linux, Windows and some macOS systems. The reported flaw is tied to Intel’s kernel virtual memory system that could allow an attacker to access kernel-protected data such as passwords and login keys, according to researchers.

Related Posts Google Patches Critical Encryption Bug…