CVE-2016-10634: Missing Encryption of Sensitive Data

scala-standalone-bin is a Binary wrapper for ScalaJS. scala-standalone-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacke...

CVE-2016-10633: Missing Encryption of Sensitive Data

dwebp-bin is a dwebp node.js wrapper that convert WebP into PNG. dwebp-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacke...

PT-2018-4811

Name of the Vulnerable Software and Affected Versions dwebp-bin versions affected versions not specified Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code executio...

PT-2018-4812

Name of the Vulnerable Software and Affected Versions scalajs-standalone-bin affected versions not specified Description The issue arises from the software downloading binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code...

Linux/ARM - Egghunter + /bin/sh Shellcode (32 bytes)

Linux/ARM - Egghunter + /bin/sh Shellcode 32 bytes. Shellcode exploit for ARM platform / Linux/ARM Raspberry Pi - Egghunter + /bin/sh Shellcode 32 bytes ------------------------------ // If your shellcode in higer address, use following egghunter. pi@raspberrypi: $ cat egghunter-higher.s .section...

scala-bin file download vulnerability

scala-bin is a package installer for the Scala language. A security vulnerability exists in scala-bin that originates when the program downloads binary resources over the HTTP protocol. A remote attacker can exploit the vulnerability by replacing the requested binary with a binary under their...

Man-in-the-Middle(MitM)

scala-bin is vulnerable to man-in-the-middle MitM attacks. This is because they download binary resources via HTTP, allowing MitM attacks. Also, it may potentially cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the...

CVE-2016-10627

scala-bin is a binary wrapper for Scala. scala-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or...

CVE-2016-10627

scala-bin is a binary wrapper for Scala. scala-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or...

CVE-2016-10627

The CVE-2016-10627 case involves scala-bin, a binary wrapper for Scala that downloads binaries over HTTP. The documented vulnerability is a MITM risk: an attacker on the network path could intercept the HTTP response and substitute a malicious binary, potentially enabling remote code execution on...

CVE-2016-10627

scala-bin is a binary wrapper for Scala. scala-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or...

CVE-2016-10627

scala-bin is a binary wrapper for Scala. scala-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or...

CVE-2016-10627: Missing Encryption of Sensitive Data

scala-bin is a binary wrapper for Scala. scala-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or...

PT-2018-4805

Name of the Vulnerable Software and Affected Versions scala-bin versions affected versions not specified Description The issue is related to scala-bin downloading binary resources over HTTP, making it susceptible to man-in-the-middle MITM attacks. This could potentially lead to remote code...

Intelbras NCLOUD 300 Router Authentication Bypass Vulnerability

The authentication in Intelbras NCLOUD 300 Routers can be bypassed. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Command Injection

Overview All versions of buttle are vulnerable to command injection. Remote command execution is possible when buttle is run with the --php-bin flag. Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time...

CVE-2018-11094: Use of Hard-coded Credentials

An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST request is made to /cgi-bin/ExportSettings.sh, the username, password, and...

PT-2018-1331

Name of the Vulnerable Software and Affected Versions Intelbras NCLOUD 300 version 1.0 Description The issue is related to the use of predefined registration data in the ExportSettings.sh, updateWPS, RebootSystem, and vpnBasicSettings components of the Intelbras NCLOUD 300 Wi-Fi router's firmware...

D-Link DSL-3782 Buffer Overflow Vulnerability (CNVD-2018-09180)

The D-Link DSL-3782 is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the /userfs/bin/tcapi binary in the D-Link DSL-3782. An attacker could exploit this vulnerability to cause memory corruption, potentially redirect program flow, and execute arbitrary code...

Linux/x86 - execve(/bin/sh) + NOT Encoded Shellcode (27 bytes)

Linux/x86 - execve/bin/sh + NOT Encoded Shellcode 27 bytes. Shellcode exploit for Linuxx86 platform / ; Title : Execve /bin/sh Shellcode encoded with NOT ; Date : May, 2018 ; Author : Nuno Freitas ; Twitter : @nunof11 ; SLAE ID : SLAE-1112 ; Size : 27 bytes ; Tested on : i686 GNU/Linux section...