vimarsana.com

Page 4 - Exploit Author News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Kingo ROOT 1 5 8 Unquoted Service Path - KizzMyAnthia com

#Exploit Title: Kingo ROOT 1.5.8 - Unquoted Service Path#Date: 8/22/2023#Exploit Author: Anish Feroz (ZEROXINN)#Vendor Homepage: https://www.kingoapp.com/#Software Link: https://www.kingoapp.com/android-root/download.htm#Version: 1.5.8.3353#Tested on: Windows 10 Pro -Discovering Unquoted Path C:UsersAnish>sc qc KingoSoftService[SC] QueryServiceConfig SUCCESSSERVICE NAME: KingoSoftServiceTYPE : 110 WIN32 OWN PROCESS (interactive)START TYPE : 2 AUTO STARTERROR CONTROL : 1 NORMALBINARY PATH NAME : C:UsersUsmanAppDataLocalKingosoftKingo Rootupdate 27205binKingoSoftService.exeLOAD ORDER GROUP :TAG : 0DISPLAY NAME : KingoSoftServiceDEPENDENCIES :SERVICE START NAME : LocalSystemC:UsersAnish>systeminfoHost Name: DESKTOP-UT7E7CFOS Name: Microsoft

Usersusmanappdatalocalkingosoftkingo rootupdateAnish ferozService pathSoftware linkExploit titleUnquoted serviceExploit authorVendor homepageDiscovering unquoted pathMicrosoft windows

FileMage Gateway 1 10 9 Local File Inclusion - KizzMyAnthia com

# Exploit Title: FileMage Gateway 1.10.9 - Local File Inclusion# Date: 8/22/2023# Exploit Author: Bryce "Raindayzz" Harty # Vendor Homepage: https://www.filemage.io/# Version: Azure Versions < 1.10.9# Tested on: All Azure deployments < 1.10.9 # CVE : CVE-2023-39026# Technical Blog - https://raindayzz.com/technicalblog/2023/08/20/FileMage-Vulnerability.html# Patch from vendor - https://www.filemage.io/docs/updates.htmlimport requestsimport warningswarnings.filterwarnings("ignore")def worker(url):response = requests.get(url, verify=False, timeout=.5)return responsedef main():listIP

Bryce raindayzz hartyExploit titleFilemage gatewayLocal fileExploit authorVendor homepageAzure versionsBall azureTechnical blog

CSZ CMS 1 3 0 Cross Site Scripting - KizzMyAnthia com

# Exploit Title: CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')# Date: 2023/08/18# CVE: CVE-2023-38911# Exploit Author: Daniel González# Vendor Homepage: https://www.cszcms.com/# Software Link: https://github.com/cskaza/cszcms# Version: 1.3.0# Tested on: CSZ CMS 1.3.0# Description:# CSZ CMS 1.3.0 is affected by a cross-site scripting (XSS) feature that allows attackers to execute arbitrary web scripts or HTML

Daniel gonzSoftware linkExploit titleStored cross site scriptingExploit authorVendor homepagePoc requestCarousel wiget

AdminLTE PiHole Broken Access Control - KizzMyAnthia com

# Exploit Title: AdminLTE PiHole < 5.18 - Broken Access Control# Google Dork: [inurl:admin/scripts/pi-hole/phpqueryads.php](https://vuldb.com/?exploit googlehack.216554)# Date: 21.12.2022# Exploit Author: kv1to# Version: Pi-hole v5.14.2; FTL v5.19.2; Web Interface v5.17# Tested on: Raspbian / Debian# Vendor: https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-6qh8-6rrj-7497# CVE : CVE-2022-23513In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked

Raspbian debianExploit titleGoogle dorkExploit authorWeb interfaceProof of concept

PlayTube 3 0 1 Information Disclosure - KizzMyAnthia com

# Exploit Title: PlayTube 3.0.1 - Redirect Information Disclosure# Exploit Author: CraCkEr# Date: 19/08/2023# Vendor: PlayTube# Vendor Homepage: https://playtubescript.com/# Software Link: https://demo.playtubescript.com/# Tested on: Windows 10 Pro# Impact: Sensitive Information Leakage# CVE: CVE-2023-4714# CWE: CWE-200 - CWE-284 - CWE-266## GreetingsThe PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL , MoizSid09, indoushkaCryptoJob (Twitter) twitter.com/0x0CryptoJob## DescriptionInformation disclosure

Software linkAdministration panelExploit titleRedirect informationExploit authorVendor homepageSensitive information

vimarsana © 2020. All Rights Reserved.