MySQL Zero-Days — Hacking Website Databases Remotely

Two critical zero-day vulnerabilities have been discovered in the world's 2nd most popular database management software MySQL that could allow an attacker to take full control over the database. Polish security researcher Dawid Golunski has discovered two zero-days, CVE-2016-6662 and CVE-2016-6663, that affect all currently supported MySQL versions as well as its forked such as MariaDB and

from The Hacker News http://ift.tt/2clFaHA
via IFTTT

[FD] XSS found on www.google.fr

[FD] [RCESEC-2016-006] XenForo ToggleME 3.1.2 "/admin.php?options/list/toggleME" Multiple Persistent Cross-Site Scriptings

RCE Security Advisory http://ift.tt/1FlL0Pz 1. ADVISORY INFORMATION ======================= Product: XenForo ToggleME plugin Vendor URL: http://ift.tt/2cTEjR8 Type: Cross-Site Scripting [CWE-79] Date found: 2016-09-06 Date published: 2016-09-11 CVSSv3 Score: 5.5 (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) CVE: - 2. CREDITS ========== This vulnerability was discovered and researched by Julien Ahrens from RCE Security. 3. VERSIONS AFFECTED ==================== ToggleME 3.1.2 older versions may be affected too. 4. INTRODUCTION =============== This addon will allow your users to collapse/expand some parts of your website: -forum categories -widgets -sidebar -sub-forums -postbit (*) -polls (*) (from the vendor's homepage) 5. VULNERABILITY DETAILS ======================== The script "/admin.php?options/list/toggleME" is vulnerable to multiple authenticated persistent Cross-Site Scripting vulnerabilities when user- supplied input is processed by the web application. Since the application does not properly validate and sanitize the user group title, the style title and the category title values, which can be configured in the XenForo backend, it is possible to place arbitrary script code permanently on the administrative interface of the plugin "Home > Options > ToggleME" ("/admin.php?options/list/toggleME"). User Group Title PoC

Source: Gmail -> IFTTT-> Blogger

[FD] CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )

Vulnerability: MySQL Remote Root Code Execution / Privilege Escalation 0day CVE: CVE-2016-6662 Severity: Critical Affected MySQL versions (including the latest): <= 5.7.15 <= 5.6.33 <= 5.5.52 Discovered by: Dawid Golunski http://legalhackers.com An independent research has revealed multiple severe MySQL vulnerabilities. This advisory focuses on a critical vulnerability with a CVEID of CVE-2016-6662. The vulnerability affects MySQL servers in all version branches (5.7, 5.6, and 5.5) including the latest versions, and could be exploited by both local and remote attackers. Both the authenticated access to MySQL database (via network connection or web interfaces such as phpMyAdmin) and SQL Injection could be used as exploitation vectors. Successful exploitation could allow attackers to execute arbitrary code with root privileges which would then allow them to fully compromise the server on which an affected version of MySQL is running. This advisory provides a (limited) Proof-Of-Concept MySQL exploit which demonstrates how Remote Root Code Execution could be achieved by attackers. Full PoC will be provided later on to give users a chance to react to this exploit as the issue has not been patched by all the affected vendors yet despite efforts. The exploitation is interesting in the way that it involves an oldschool LD_PRELOAD environment variable and that it targets a service that doesn't serve requests as root but could still be tricked to get root RCE when restarted. Might give you strange feelings when restarting mysql service the next time ;) The advisory is available at: http://ift.tt/2c43oEh

Source: Gmail -> IFTTT-> Blogger

[FD] Brute force every Samsung repair customer's info with ease

Samsung has zero interest in fixing this and I'm tired of trying to report it to them. Enjoy. http://ift.tt/2ciUSlH

Source: Gmail -> IFTTT-> Blogger