Exploit Collector
OpenVPN Monitor 1.1.3 Authorization Bypass / Denial Of Service

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SmarterTools SmarterTrack 7922 Information Disclosure

https://1.bp.blogspot.com/-CxGUMLkxSaY/WWlvcQOBNxI/AAAAAAAAIPc/zOKm_r-QYksdaJn5z44Zj2ZlNH1F7PBGQCLcBGAs/s1600/h75.png
SmarterTools SmarterTrack 7922 suffers from an information disclosure vulnerability.

MD5 | eee4a3d556dbb4d6a7731be368f9471b

Download
# Exploit Title: SmarterTools SmarterTrack 7922 - 'Multiple' Information Disclosure
# Google Dork: intext:"Powered by SmarterTrack"
# Date: 23/01/2020
# Exploit Author: Andrei Manole
# Vendor Homepage: https://www.smartertools.com/
# Software Link: https://www.smartertools.com/smartertrack
# Version: TESTED ON 10.x -> 14.x and to Build 7922 (set 9, 2021)
# Tested on: Windows 10

POC:
VULNERABLE TARGET/Management/Chat/frmChatSearch.aspx
This file disclosure all agents id and first name and second name


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
OpenVPN Monitor 1.1.3 Command Injection

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
OpenVPN Monitor 1.1.3 Cross Site Request Forgery

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft Warns of Uptick in MSHTML Attacks

Attackers leveraging the flaw are using infrastructure associated with other criminal groups, including ransomware-as-a-service operators, the company says.

Dark Reading: Attacks/Breaches
Infrastructure, Security, and the Need for Visibility

Government authorities are increasingly trying to bolster critical infrastructure security. But investments in next-generation solutions won't go far enough without also addressing security and operational fundamentals.

Dark Reading: Attacks/Breaches
IoT 'Nutrition' Labels Aim to Put Security on Display

NIST has laid the groundwork for an easy-to-understand way to communicate to consumers the security of software and connected devices.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
International Insider Threat: DoJ Fines US Intel Officials Who Aided UAE

Three former US intelligence operatives have been fined $1,685,000 for aiding the United Arab Emirates in widespread hacking campaigns.

Dark Reading: Attacks/Breaches
New Report Examines Top Threats Discussed at Black Hat USA

Supply chain security and vulnerabilities in enterprise software were among the threats most dicussed at this year's show, survey data reveals.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Should the CSO Work With the Chief Privacy Officer?

The chief security officer needs to be in constant communication with the chief privacy officer about what's working or not working.

Dark Reading: Attacks/Breaches
Mirai Botnet Exploiting OMIGOD Azure Vulnerability

Microsoft patched four Open Management Infrastructure flaws earlier this week.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
White House Cybersecurity Summit: A Missed Opportunity

Last month's summit with the president was missing something crucial: representation from those who deal with critical infrastructure.

Dark Reading: Attacks/Breaches
CISA to Host Fourth Annual National Cybersecurity Summit

Registration is now open for the October event.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
10 Ways to Avoid Zero-Trust Failure

Here are the prerequisites to have in order before getting past the zero-trust gate.

Dark Reading: Attacks/Breaches
Arista, Cisco, Huawei, Juniper Networks, and Nokia Launch New MANRS Equipment Vendor Program to Improve Routing Security Worldwide

Founding members of the MANRS Initiative will tackle the systemic vulnerabilities of global routing security through groundbreaking collaborative action.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
F5 Networks to Buy Threat Stack

F5 Networks plans to combine its application and API security tools with Threat Stack's cloud protection capabilities.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Open Source Software Projects Up Their Security Game but Face More Attacks

Patches for dependencies are trickling up through the open source ecosystem faster than ever — a good thing because attackers are focusing more on open source software.

Dark Reading: Attacks/Breaches
Why Cryptomining Malware Is a Harbinger of Future Attacks

Crypto thieves rely on users not noticing installation of their tiny payload on thousands of machines, or the CPU cycles being siphoned off to perpetuate the schemes.