-
Content Count
10,910 -
Avg. Content Per Day
3 -
Joined
-
Last visited
-
Days Won
1
10 Followers
-
The fix for CVE-2021-21148 has added a check in |ValueSerializer::WriteJSArrayBuffer| to make sure non-detachable array buffers cannot be transferred. The check can be bypassed with the help of asm.js and property getters. View the full article
-
ExploitsStudent Management System 1.0 Cross Site Scripting
a topic posted 1337day-Exploits in Updated Exploits
Student Management System version 1.0 suffers from a persistent cross site scripting vulnerability. View the full article -
ExploitsPodcast Generator 3.1 Cross Site Scripting
a topic posted 1337day-Exploits in Updated Exploits
Podcast Generator version 3.1 suffers from a persistent cross site scripting vulnerability. View the full article -
ExploitsChamilo LMS 1.11.14 Remote Code Execution
a topic posted 1337day-Exploits in Updated Exploits
Chamilo LMS version 1.11.14 authenticated remote code execution exploit. View the full article -
ExploitsInternet Explorer jscript9.dll Memory Corruption
a topic posted 1337day-Exploits in Updated Exploits
There is a vulnerability in jscript9 that could be potentially used by an attacker to execute arbitrary code when viewing an attacker-controlled website in Internet Explorer. The vulnerability has been confirmed on Windows 10 64-bit with the latest security patches applied. View the full article -
Firefox 72 IonMonkey JIT type confusion exploit. View the full article
-
ExploitsScadaBR 1.0 / 1.1CE Windows Shell Upload
a topic posted 1337day-Exploits in Updated Exploits
ScadaBR versions 1.0 and 1.1CE authenticated shell upload exploit written for Windows targets. View the full article -
ExploitsMicrosoft Internet Explorer 8/11 Use-After-Free
a topic posted 1337day-Exploits in Updated Exploits
Microsoft Internet Explorer 8/11 and WPAD service Jscript.dll use-after-free exploit. View the full article -
ScadaBR versions 1.0 and 1.1CE authenticated shell upload exploit written for Linux targets. View the full article
-
ExploitsOpenPLC WebServer 3 Remote Code Execution
a topic posted 1337day-Exploits in Updated Exploits
OpenPLC WebServer version 3 authentication remote code execution exploit. View the full article -
ExploitsDental Clinic Appointment Reservation System 1.0 SQL Injection
a topic posted 1337day-Exploits in Updated Exploits
Dental Clinic Appointment Reservation System version 1.0 suffers from multiple remote SQL injection vulnerabilities with one of them allowing for authentication bypass. View the full article -
ExploitsZeroShell 3.9.0 Remote Command Execution
a topic posted 1337day-Exploits in Updated Exploits
ZeroShell version 3.9.0 remote command execution exploit. View the full article -
ExploitsWindows Container Manager Service CmsRpcSrv_MapNamedPipeToContainer Privilege Escalation
a topic posted 1337day-Exploits in Updated Exploits
The Container Manager Service does not configure STORVSP correctly when opening mapped named pipes leading to privilege escalation. View the full article -
This Metasploit module exploits a Perl injection vulnerability in the DjVu ANT parsing code of ExifTool versions 7.44 through 12.23 inclusive. The injection is used to execute a shell command using Perl backticks. The DjVu image can be embedded in a wrapper image using the HasselbladExif EXIF field. View the full article
-
ExploitsWindows Container Manager Service Arbitrary Object Directory Creation Privilege Escalation
a topic posted 1337day-Exploits in Updated Exploits
The Container Manager Service creates an AppContainer process without impersonating the access token leading to privilege escalation. View the full article