35967 matches found
libunwind_CVE-2015-3239_AfterPatch
-- mode: Outline - - Esta es la versión 1.0 de la biblioteca unwind. Esta biblioteca soporta varias combinaciones de arquitectura/sistema operativo: Linux/x86-64: Funciona bien. Linux/x86: Funciona bien. Linux/ARM: Funciona bien. Linux/IA-64: Completamente probada y soportada. Linux/PARISC:...
GHOSTCHECK-cve-2015-0235
Ghostcheck This is a really, really light fabric script - for checking the impact of CVE-2015-0235 GHOST on a running linux host. Forked into Lyrical after writing. Python 2.6 and higher recommended, and Fabric is needed. Usage: fab -f ghostcheck.py -u sshusername -p sshpassword -H ip ,ip2 ,ipN g...
mysslstrip
mysslstrip mysslstrip es una prueba de concepto basada en Python que muestra cómo realizar un ataque MITM sobre tráfico MySQL y eliminar SSL/TLS, según CVE-2015-3152. Uso mysslstrip.py -h -p PUERTOESCUCHA -i INTERFAZESCUCHA destino Ejemplo de salida root@kitploit: root@duo1 python2.7 mysslstrip.p...
cookbook-update-glibc
cookbook-update-glibc Overview cookbook for update glibc. CVE-2015-0235GHOST Japan http://www.walbrix.com/jp/blog/2015-01-ghost.html English http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235 Description update glibc by Chef Solo. Attention. this cookbook need to reboot. Platform is...
CVE-2015-1427-for-trixie
Este repositorio no tiene un README...
CVE-2015-1328
Este repositorio no tiene un README...
CVE-2015-5736
CVE-2015-5736 PoC para CVE-2015-5736 usando ROP, sobrescritura de PreviousMode y robo de Token solo con fines educativos...
CVE-2015-3246
CVE-2015-3246 and More cve-2015-3245, cve-2015-3246, cve-2015-3245, cve-2015-3246 Donate...
cve-2015-1328
This repository does not have a README...
CVE-2015-8660
This repository does not have a README...
hackviser_labs_CVE-2015-3306
hackviserlabsCVE-2015-3306 This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab. run it using the following command: python3 exploit.py replace with the address you got from starting the lab on the hackviser platform...
SysAid Help Desk <15.2 - Local File Inclusion
SysAid Help Desk before 15.2 contains multiple local file inclusion vulnerabilities which can allow remote attackers to read arbitrary files via .. dot dot in the fileName parameter of getGfiUpgradeFile or cause a denial of service CPU and memory consumption via .. dot dot in the fileName paramet...
Red Hat JBoss - Insecure Deserialization
Red Hat JBoss Application Server 4.x, 5.x, 6.x contains an insecure deserialization vulnerability in the JMXInvokerServlet and EJBInvokerServlet HTTP Invoker endpoints. These endpoints deserialize arbitrary Java objects from unauthenticated HTTP POST requests. An attacker can send a crafted Apach...
FortiLOL
FortiLOL FortiClient FortiShield exploit CVE-2015-5736 for Windows 10 1809...
CVE-2015-1635_PoC
usage: python3 CVE-2015-1635PoC.py e.g. python3 CVE-2015-1635PoC.py http://www.xxx.com...
CVE-2015-8351_Otter_Remix
Este repositorio no tiene un README...
docker_cve-2015-2925
Docker + CVE-2015-2925 = escapando de --volume Vulnerabilidad reciente en Linux conocida desde hace aproximadamente medio año varios meses de forma pública hizo posible escapar de los bind mounts. En particular, en el caso de Docker es posible escapar desde el interior del directorio montado...
ProFTPd-1.3.5-mod_copy-Remote-Command-Execution
ProFTPd-1.3.5-modcopy-Remote-Command-Execution Script que explota la vulnerabilidad del servicio ProFTP 1.3.5 con CVE-2015-3306 Uso .ProFTPD1.3.5RemoteCommandExecution.py -h --rhost RHOST --rportftp RPORTFTP --targeturi TARGETURI --tmppath TMPPATH --sitepath SITEPATH --payload PAYLOAD...