Barracuda Email Security Gateway Service Detection

Binary data barracudaemailsecuritygatewayservicedetect.nbin...

Safari < 16.5.1 Vulnerability

Binary data 701441.pasl...

D-Link D-View 8 Path Traversal RCE (CVE-2023-32165)

Binary data dlinkdview8cve-2023-32165.nbin...

D-Link D-View 8 Probe Server Detection

Binary data dlinkdview8probedetect.nbin...

Apple iOS < 16.5.1 Multiple Vulnerabilities (HT213814)

Binary data appleios1651check.nbin...

CVE-2023-32449: Improper Verification of Cryptographic Signature

Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks...

Exploit for Out-of-bounds Write in Fortinet Fortios

CVE-2022-42475 Background This is the exploit for the blog...

Apache Tomcat < 9.0.75 Vulnerability

Binary data 701438.pasl...

Apache Tomcat < 10.1.9 Vulnerability

Binary data 701439.pasl...

PT-2023-25182 · Sliver · Sliver

Name of the Vulnerable Software and Affected Versions: Sliver versions up to 1.5.39 Description: The cryptography implementation in Sliver allows a man-in-the-middle MitM attack with access to the corresponding implant binary to execute arbitrary code on implanted devices via intercepted and...

Apache Tomcat < 11.0.0-M6 Vulnerability

Binary data 701437.pasl...

CVE-2023-32274

Enphase Installer Toolkit versions 3.27.0 has hard coded credentials embedded in binary code in the Android application. An attacker can exploit this and gain access to sensitive information...

Supply Chain Attack: Abandoned S3 Buckets Used for Malicious Payloads

By Deeba Ahmed Threat actors have been taking over abandoned S3 buckets to launch malicious binaries, steal login credentials and more. This is a post from HackRead.com Read the original post: Supply Chain Attack: Abandoned S3 Buckets Used for Malicious Payloads...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.19 (SUSE-SU-2023:2525-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2525-1 advisory. Update to go1.19.10 bsc1200441: - CVE-2023-29402: cmd/go: Fixed cgo code injection bsc1212073. -...

The vulnerability of D-Link DIR-842V2 router’s microprogramming software, related to the lack of measures taken to clean data at the control level, allows attackers to execute arbitrary commands.

The vulnerability of D-Link DIR-842V2 router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by importing a specially created binary file...

VMware Aria Operations For Networks Web Interface Detection

Binary data vmwareariaoperationsfornetworkswebdetect.nbin...

Liferay Portal Installed (Unix / Linux)

Binary data liferaydetection.nbin...

Zyxel Router Detection - Get Basic Information

Binary data zyxelrouterdetectgetbasicinfo.nbin...

CVE-2023-29403

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I...

Design/Logic Flaw

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I...