SEH utnserver Pro/ProMAX/INU-100 20.1.22 - Cross-Site Scripting

A vulnerability was found in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, affecting the device description parameter in the web interface. This flaw allows stored cross-site scripting XSS, enabling attackers to inject JavaScript code. The attack can be executed remote...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

CVE-2024-5420-XSS

Description A vulnerability was found in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, affecting the device description parameter in the web interface. This flaw allows stored cross-site scripting XSS, enabling attackers to inject JavaScript code. The attack can be...

DSSS

Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS is a fully functional SQL injection vulnerability scanner supporting GET and POST parameters written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...

CVE-2016-5639

CVE-2016-5639 Crestron AirMedia AM-100 Traversal and Hashdump Metasploit Modules Two similar modules that take advantage of CVE-2016-5639 to dump hashes and retrieve files through path traversal. I made these modules separate because I wanted experience writing something that could "dump" hashes,...

CVE-2019-3929

CVE-2019-3929 Crestron/Barco/Extron/InFocus/TeqAV Remote Command Injection CVE-2019-3929 Metasploit Module Per Tenable's description: "A remote, unauthenticated attacker can execute operating system commands as root via crafted requests to the HTTP endpoint filetransfer.cgi. This vulnerability...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

100DaysofYARA

100 Days of YARA 2026 Welcome to 100 Days of YARA! This repository will act as the store for all YARA ideas created during this time. Any fun scripts, tools, or rules you write can be committed to this GitHub repository! For now, any associated blogging, walkthroughs, or other musing can be hoste...

100-Days-of-YARA-2026

This repository does not have a README...

2022

100 Days of YARA Parte 2 - Electric Detectaloo Chiedo scusa in anticipo per il nome terribile, ma benvenuti a 100 Days of YARA! Questo repository fungerà da archivio per tutte le idee YARA create durante questo periodo. Qualsiasi script, strumento o regola divertente che scrivi può essere commita...

watchTowr-vs-SonicWall-PreAuth-RCE-Chain

SonicWall SMA 100 PreAuth RCE Chain PoC PoC per la catena RCE PreAuth di SonicWall SMA 100 CVE-2023-44221, CVE-2024-38475 Consulta il nostro post sul blog per i dettagli tecnici https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoC in Azione root@kitploit: python...

2023

100 Days of YARA Parte 2 - Electric Detectaloo Mi scuso in anticipo per il nome terribile, ma benvenuti a 100 Days of YARA! Questo repository fungerà da archivio per tutte le idee YARA create durante questo periodo. Qualsiasi script, strumento o regola divertente che scrivi può essere committato ...

GHSA-V358-WF77-39XV klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits

Summary In processPercentageRoyaltiesTransfer the royalty pool is collected from the sender by SubFromBalance that is ordered after the split loop and after if royaltiesToPay royaltiesToPay, so a split entry of exactly 100% PercentTransferPercentage = 10000 is a valid config: it drives...

CVE-2016-5640

CVE-2016-5640 Crestron AirMedia AM-100 RCE CVE-2016-5640 Metasploit-Modul Modul zur Ausnutzung einer Remote-Command-Injection-Sicherheitslücke auf der drahtlosen Diagnoseseite von Crestron AirMedia AM-100-Geräten mit einer Firmware-Version 1.4.0.13. Die Befehle werden unter dem Konto ausgeführt,...

badblood

Bad Blood Bad Blood è un exploit per CVE-2021-20038, un buffer overflow basato su stack nel binario httpd dei sistemi della serie SMA-100 con versioni firmware 10.2.1.x. Ho scritto molti dei dettagli tecnici qui: AttackerKB CVE-2021-20038 L'exploit, così com'è scritto, aprirà una shell telnet bin...

100_days_of_kql_2026

100 Days of KQL 2026 Iniziativa Requisiti: Crea un account GitHub Crea un repository chiamato 100daysofkql Esempio: https://github.com/m4nbat/100daysofkql2026 Crea un readme.md e aggiungi questa riga al tuo readme: 100DaysOfKQL2026 Repository principale con istruzioni:...

CVE-2021-36630

CVE-2021-36630 I dispositivi della serie SmartZone di Ruckus presentano rischi per la sicurezza. Dopo aver notificato il produttore, hanno organizzato attivamente personale tecnico per condurre indagini. Durante questo periodo, abbiamo anche fornito più volte suggerimenti di sicurezza e metodi di...

CVE-2026-18164 Flow Neuroscience FL-100 Use of Hard-coded Credentials

An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state...

CVE-2026-18164

The CVE concerns Flow Neuroscience FL-100 with an undocumented hard-coded credential that bypasses authentication. The credential is shared across all device units, allowing an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state. Affected component is ...