Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
DiskBoss Service 12.2.18 Unquoted Service Path

https://4.bp.blogspot.com/-yl8JZs3kPK0/WWlvOF1SUeI/AAAAAAAAIMk/jv5-1ECzklsqpq4rMFWFx2wFFGh-Q9GlwCLcBGAs/s1600/h24.png
DiskBoss Service version 12.2.18 suffers from an unquoted service path vulnerability.

MD5 | 18b444c469c2694e01313945d61c03ba

Download

# Exploit Title: DiskBoss Service 12.2.18 - 'diskbsa.exe' Unquoted Service Path
# Discovery by: Erick Galindo 
# Discovery Date: 2021-05-21
# Vendor Homepage: https://www.diskboss.com
# Software :  https://www.diskboss.com/setups_x64/diskboss_setup_v12.2.18_x64.exe
# Tested Version: 12.2.18
# Vulnerability Type: Unquoted Service Path
# Tested on OS: Windows 10 Pro  x64 es
# Step to discover Unquoted Service Path:

C:\>wmic service get name, pathname, displayname, startmode | findstr "Auto" | findstr /i /v "C:\Windows\\" | findstr /i "DiskBoss" | findstr /i /v """
DiskBoss Service                 DiskBoss Service            C:\Program Files\DiskBoss\bin\diskbsa.exe                   Auto

# Service info

C:\>sc qc "DiskBoss Service"
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: DiskBoss Service
TIPO               : 10  WIN32_OWN_PROCESS
TIPO_INICIO        : 2   AUTO_START
CONTROL_ERROR      : 0   IGNORE
NOMBRE_RUTA_BINARIO: C:\Program Files\DiskBoss\bin\diskbsa.exe
GRUPO_ORDEN_CARGA  :
ETIQUETA           : 0
NOMBRE_MOSTRAR     : DiskBoss Service
DEPENDENCIAS       :
NOMBRE_INICIO_SERVICIO: LocalSystem

#Exploit:

This vulnerability could permit executing code during startup or reboot with the escalated privileges.

Source:packetstormsecurity.com
➖ Sent by @TheFeedReaderBot ➖

6 views14:59

Hacking Articles Tips Tricks Videos Tutorials

6 views14:59

Hacking Articles Tips Tricks Videos Tutorials

7 views14:59

Hacking Articles Tips Tricks Videos Tutorials

7 views14:59

Hacking Articles Tips Tricks Videos Tutorials

7 views14:59

Hacking Articles Tips Tricks Videos Tutorials

7 views14:59

Hacking Articles Tips Tricks Videos Tutorials

6 views14:59

Hacking Articles Tips Tricks Videos Tutorials

6 views14:59

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Backdoor.Win32.SkyDance.216 Buffer Overflow

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Backdoor.Win32.SkyDance.216 Buffer Overflow

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

6 viewsedited 14:59

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Backdoor.Win32.Singu.a Buffer Overflow

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Backdoor.Win32.Singu.a Buffer Overflow

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

6 viewsedited 14:59

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
WordPress ReDi Restaurant Reservation 21.0307 Cross Site Scripting

https://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png
WordPress ReDi Restaurant Reservation plugin version 21.0307 suffers from a persistent cross site scripting vulnerability.

MD5 | 97371d46e078284e75d608dc3d9438a0

Download

# Exploit Title: WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting (XSS)
# Date: 2021-05-10
# Exploit Author: Bastijn Ouwendijk
# Vendor Homepage: https://reservationdiary.eu/
# Software Link: https://wordpress.org/plugins/redi-restaurant-reservation/
# Version: 21.0307 and earlier
# Tested on: Windows 10
# CVE : CVE-2021-24299
# Proof: https://bastijnouwendijk.com/cve-2021-24299/

Steps to exploit this vulnerability:

1. Go to the page where [redirestaurant] is embed to make a restaurant reservation by filling in the requested information
2. In the 'Comment' field of the restaurant reservation form put the payload: ``
3. Submit the form
4. While being logged into WordPress as administrator go to ReDi Reservations > Upcoming (Tablet PC)
5. Click on 'View upcoming reservations'
6. Select for 'Show reservations for': 'This week'
7. The reservations are loaded and two alerts are shown with text 'XSS'