doanhnhq doanhnhq

CVE-2020-0601 AKA ChainOfFools OR CurveBall

Microsoft disclosed a vulnerability in their monthly Patch Tuesday referenced under CVE-2020-0601.
The vulnerability was discovered by the U.S. National Security Agency, anounced today (2020-01-14) in their press conference, followed by a blog post and an official security advisory.
The flaw is located in the "CRYPT32.DLL" file under the C:\Windows\System32\ directory.

NSA description:
NSA has discovered a critical vulnerability (CVE-2020-0601) affecting Microsoft Windows® cryptographic functionality.

Bootstrap < 3.4.1 || < 4.3.1

✔️ CSP strict-dynamic bypass

➖ Requires user interaction

➖ Requires $('[data-toggle="tooltip"]').tooltip();

	Remote Code Execution via File Upload (CVE-2020-12255)


	The rConfig 3.9.4 is vulnerable to remote code execution due to improper checks/validation via the file upload functionality.
	The vendor.crud.php accepts the file upload by checking through content-type and it is not restricting upload by checking the file extension and header.
	Due to this flaw, An attacker can exploit this vulnerability by uploading a PHP file that contains arbitrary code (shell) and changing the content-type to `image/gif` in the vendor.crud.php.
	since the validation checks are happening through content-type the server would accept the PHP file uploaded ultimately resulting code execution upon the response when invoked.


	Steps To Reproduce-:

	<?php

	//php gd-gif.php image.gif gd-image.gif

	$gif = imagecreatefromgif($argv[1]);
	imagegif($gif, $argv[2]);
	imagedestroy($gif);
	?>

	Name : Finding vulnerabilities in PHP scripts FULL ( with examples )
	Author : SirGod
	Email : sirgod08@gmail.com
	Contents :

	1) About
	2) Some stuff
	3) Remote File Inclusion
	3.0 - Basic example
	3.1 - Simple example

	# save it as /etc/profile.d/ssh-telegram.sh
	# use jq to parse JSON from ipinfo.io
	# get jq from here http://stedolan.github.io/jq/
	USERID="<target_user_id>"
	KEY="<bot_private_key>"
	TIMEOUT="10"
	URL="https://api.telegram.org/bot$KEY/sendMessage"
	DATE_EXEC="$(date "+%d %b %Y %H:%M")"
	TMPFILE='/tmp/ipinfo-$DATE_EXEC.txt'
	if [ -n "$SSH_CLIENT" ]; then

	#!/bin/bash

	################################################################################

	# This script will check to see if a website is up/down by pinging the url
	# If there is no response an email wil be send via an external smtp mail server
	# If the site status is down an email will be send when the site is up again

	# set your check interval here :-) #############################################
	interval=3600 # hour