Xilisoft Video Converter Ultimate DLL Hijacking

Overview of Xilisoft Video Converter Ultimate

Xilisoft Video Converter Ultimate is a professional video converter which has a wide range of video and audio formats. I personally love this software since it uses GPU acceleration in converting videos.

It is on the high side of premium video converters for home use. It automatic profiles enhanced for just any device or format, graphics card detection and acceleration.
-CNET

(more…)

XSS in CloudFlare

#1 XSS

These are some of my duplicate vulnerabilities found. I just thought of sharing with you. Recently I found two POST XSS in CloudFlare and unfortunately I was not the first to report.
I found the first issue in the “Confirm Key Generator” dialog box.

View post on imgur.com

Let’s have a closer look at the URL.

/ajax/model-dialog.htm

It seems like an XMLHttpRequest object is used in the server side it accept our POST request. (more…)

Wireshark DoS PoC

I recently found out that Wireshark 1.10.7 32-bit and 64-bit versions crashes when we input a large buffer into the

  • Filter text box
  • Statistics -> IP DESTINATIONS
  • Statistics -> IP Addresses

(more…)

Acknowledged by Apple

Yes! I got mentioned in Apple 🙂 http://support.apple.com/kb/HT1318

https://fbcdn-sphotos-h-a.akamaihd.net/hphotos-ak-frc3/t1.0-9/10264719_10203922652573307_5125318766079887390_n.jpg

Acknowledged by Honeybadger

For reporting a server side issue I got acknowledged 🙂

https://fbcdn-sphotos-b-a.akamaihd.net/hphotos-ak-ash3/t1.0-9/10153727_10203936098589449_862185364377209482_n.jpg

Rewarded by WordPress

For reporting a security misconfiguration in the server I got rewarded 🙂 thank you very much 🙂

https://scontent-b-sin.xx.fbcdn.net/hphotos-prn2/t1.0-9/10250107_10203922624332601_954716133927497901_n.jpg

https://fbcdn-sphotos-f-a.akamaihd.net/hphotos-ak-frc3/t1.0-9/10307239_10203922624292600_8569974772412153834_n.jpg