go

Google's Bug Bounty Program Just Had A Record-Breaking Year Of Payouts







go

Google Launches Coronavirus Website In The United States




go

Google Data Shines Light On Whether Coronavirus Lockdowns Worldwide Are Working






go

web.go Insecure Cookie

web.go suffers from an insecure cookie vulnerability. Their cookie is modeled after Tornado which had the same issue reported on in 2010.












go

Sentrifugo 3.2 File Upload Restriction Bypass

Sentrifugo version 3.2 suffers from a file upload restriction bypass vulnerability.






go

Microsoft Windows NtUserMNDragOver Local Privilege Escalation

This Metasploit module exploits a NULL pointer dereference vulnerability in MNGetpItemFromIndex(), which is reachable via a NtUserMNDragOver() system call. The NULL pointer dereference occurs because the xxxMNFindWindowFromPoint() function does not effectively check the validity of the tagPOPUPMENU objects it processes before passing them on to MNGetpItemFromIndex(), where the NULL pointer dereference will occur. This module has been tested against Windows 7 x86 SP0 and SP1. Offsets within the solution may need to be adjusted to work with other versions of Windows, such as Windows Server 2008.









go

Germany Rolls Out ePassport II - It's Fingerprinting Good!




go

Django 3.0 Cross Site Request Forgery

Django version 3.0 suffers from a cross site request forgery token bypass vulnerability.






go

Gold Galleon Hackers Target Maritime Shipping Industry




go

Sentrifugo CMS 3.2 Cross Site Scripting

Sentrifugo CMS version 3.2 suffers from a persistent cross site scripting vulnerability.




go

Draytek VigorAP Cross Site Scripting

Draytek VigorAP suffers from a persistent cross site scripting vulnerability. Multiple different versions are affected.







go

Source Engine CS:GO Build 4937372 Arbitrary Code Execution

Source Engine CS:GO BuildID: 4937372 arbitrary code execution exploit.








go

Hydra Network Logon Cracker 8.9.1

THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus.




go

Hydra Network Logon Cracker 9.0

THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus.