Citrix ADC and Citrix NetScaler Gateway Reflected Code Injection (CTX276688) (Direct Check)

Binary data citrixcve-2020-8194.nbin...

Input validation

An improper binary stream data handling issue was found in the core module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. Using this bug, an attacker is able to produce a denial of service attack that can eventually shut down the target server...

CVE-2021-25829

An improper binary stream data handling issue was found in the core module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. Using this bug, an attacker is able to produce a denial of service attack that can eventually shut down the target server...

SolarWinds Orion Web Performance Monitor (WPM) Remote Detection

Binary data solarwindsorionwpmdetect.nbin...

Binary Vulnerability in Crypto Configuration Software (CNVD-2021-21762)

QuickControl Configuration Software is a monitoring software used in industrial power and other fields. A binary vulnerability exists in Quick Control Configuration Software. An attacker can exploit the vulnerability to execute arbitrary code...

Binary Vulnerability in Quick Controls Configuration Software

QuickControl Configuration Software is a monitoring software used in industrial power and other fields. A binary vulnerability exists in Quick Control Configuration Software. An attacker can exploit the vulnerability by sending constructed data that will cause the operating environment to crash a...

CVE-2021-25829: Undefined Security Weakness

An improper binary stream data handling issue was found in the core module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. Using this bug, an attacker is able to produce a denial of service attack that can eventually shut down the target server...

Binary vulnerability in Thunderbolt 11

Xunlei 11 is a download software based on multi-resource hyper-threading technology. A binary vulnerability exists in Xunlei 11, which can be exploited by attackers to cause a denial of service...

Microsoft open sources CodeQL queries used to hunt for Solorigate activity

A key aspect of the Solorigate attack is the supply chain compromise that allowed the attacker to modify binaries in SolarWinds’ Orion product. These modified binaries were distributed via previously legitimate update channels and allowed the attacker to remotely perform malicious activities, suc...

VMware vCenter Server RCE (direct check)

Binary data vmwarevcentercve-2021-21972.nbin...

SolarWinds Orion Network Performance Monitor Installed (Windows)

Binary data solarwindsorionnpmwininstalled.nbin...

HPE Edgeline Infrastructure Manager Detection

Binary data hpeeimdetect.nbin...

Linux Sudo Privilege Escalation (Out-of-bounds Write)

Binary data linuxcve-2021-3156.nbin...

uafuzz

This is an offensive tool for Binary Analysis. The repository, cherrywb/uafuzz, is a directed fuzzer dedicated to Use-After-Free UAF bugs at the binary level. It aims to detect UAF bugs, which appear when a heap element is used after having been freed. The tool uses a combination of static...

libxlsxwriter stock in binary vulnerability

Libxlsxwriter is a C library for creating Excel XLSX files. The libxlsxwriter library is vulnerable to a binary vulnerability. An attacker can exploit this vulnerability to cause a program crash...

SSB - A Faster And Simpler Way To Bruteforce SSH Server

S ecure S hell B ruteforcer — A faster & simpler way to bruteforce SSH server. Installation from Binary Download a pre-built binary from releases page, unpack and run! Or: ▶ sudo curl -sSfL 'https://git.io/kitabisa-ssb' | sh -s -- -b /usr/local/bin from Source Need go1.14+ compiler installed and...

Binary Vulnerability in VisualField VF***.exe Component at Zhejiang ZDZ Information Technology Co.

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A binary vulnerability exists in the VisualField VF.exe component of Zhejiang ZDAC Information Technology Co. Ltd. that can be exploited by an attacker to cause a...

Sysinternals PsExec Elevation of Privilege (CVE-2021-1733)

An elevation of privilege vulnerability exists in Sysinternals PsExec due to the application not properly imposing security restrictions in PsExec, which leads to a security restrictions bypass and privilege escalation. It is possible for a local attacker who is authenticated as a non-admin user ...

Windows, Linux Devices Hijacked In Two-Year Cryptojacking Campaign

Cryptocurrency-mining malware, called WatchDog, has been running under the radar for more than two years – in what researchers call one of the largest and longest-lasting Monero cryptojacking attacks to date. Click to Register The attack is still in operation as of this writing – and due to the...

CVE-2020-13552

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via multiple service executables in installation folder of WebAccess, an attacker can either replace binary or loaded modules to...