64390 matches found
dnsmasq-2.4.1-fix-CVE-2017-14491
dnsmasq-2.4.1-fix-CVE-2017-14491...
CVE-2017-0213
CVE-2017-0213 用于命令行...
RCE-CVE-2017-0199-detection-analysis
🛡️ BankPaymAdviceVend.Report.docx CVE-2017-0199 – Full Blue Team Sandbox Analysis- My approach to analayze that malware that leadsto critical security vulnerability in Microsoft Office. Advanced Malware Detonation • Exploit Behaviour • IOCs • Detection Engineering. 🎯 1. Executive Summary This...
Node.js <8.6.0 - Directory Traversal
Node.js before 8.6.0 allows remote attackers to access unintended files because a change to ".." handling is incompatible with the pathname validation used by unspecified community modules. id: CVE-2017-14849 info: name: Node.js 8.6.0 - Directory Traversal author: RandomRobbie severity: high...
NETGEAR Routers - Authentication Bypass
NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices are susceptible to authentication bypass via simple crafted requests to the web management server. id: CVE-2017-5521 info: name: NETGEAR Routers - Authentication Bypass...
Joomla! <3.7.1 - SQL Injection
Joomla! before 3.7.1 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id: CVE-2017-8917 info: name: Joomla! 3.7.1 - SQL Injection...
XML-RPC Server - Remote Code Execution
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisor namespace lookups. id: CVE-2017-11610 info: name: XML-RPC Serve...
Intelbras WRN 150 - Authentication Bypass
Intelbras WRN 150 router is vulnerable to authentication bypass through cookie manipulation. An attacker can bypass authentication and download the router configuration file by manipulating the admin:language cookie. id: CVE-2017-14942 info: name: Intelbras WRN 150 - Authentication Bypass author:...
PhpColl 2.5.1 Arbitrary File Upload
PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/ via clients/editclient.php. id: CVE-2017-6090 info: name: PhpColl 2.5.1 Arbitrary File Uplo...
BOA Web Server 0.94.14 - Arbitrary File Access
BOA Web Server 0.94.14 is susceptible to arbitrary file access. The server allows the injection of "../.." using the FILECAMERA variable sent by GET to read files with root privileges and without using access credentials. id: CVE-2017-9833 info: name: BOA Web Server 0.94.14 - Arbitrary File Acces...
MantisBT <=2.30 - Arbitrary Password Reset/Admin Access
MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php. id: CVE-2017-7615 THIS TEMPLATE IS ONLY FOR DETECTING To carry out further attacks, please see reference2 below. This template works by guessing user ID. MantisBT...
CVE-2017-7525-Jackson-Deserialization-Lab
CVE-2017-7525 Java 不安全反序列化实验室 基础 Java REST 应用程序，存在不安全反序列化漏洞，可导致 RCE。 项目必须在 Java 8u45 上运行 基于 Maven，依赖如下： jackson-databind 2.2.2 commons-collections 3.1 spring-context-support 4.3.11 您可以通过 Maven 添加更多依赖，以便尝试其他 gadget。 运行 打开（推荐使用 IntelliJ IDEA）并运行 src/main/java/com/deserialization/lab/Main.java 中的 Ja...
weblogic_honeypot
WebLogic HoneyPot（WebLogic 蜜罐） Cymmetria Research, 2018. https://www.cymmetria.com/ 作者：Omer Cohen @omercnet 特别感谢：Imri Goldberg @lorgandon、Itamar Sher、Nadav Lev 联系方式：[email protected] WebLogic HoneyPot 是一个低交互蜜罐，用于检测 Oracle Fusion Middleware 组件 Oracle WebLogic Server 中的 CVE-2017-10271...
nahsra__antisamy_CVE-2017-14735_1-5-6
AntiSamy 用于快速、可配置地清理来自不可信来源的HTML的库。支持Java 8+。 另一种说法可能是：这是一个API，帮助您确保客户端在其个人资料、评论等中提供的HTML中不包含恶意代码，这些代码会被持久化在服务器上。对于Web应用程序而言，“恶意代码”通常指“JavaScript”。大多数情况下，层叠样式表仅在调用JavaScript时才被视为恶意。然而，在很多情况下，“正常”的HTML和CSS也可能被恶意使用。 重要！- 1.7.0版本中的API破坏性变更...
struts-rce-cve-2017-5638
struts-rce-cve-2017-5638 Struts-RCE CVE-2017-5638 Este es un exploit modificado que crea una webshell y proporciona una interfaz similar a bash/cmd para interactuar con la webshell en la consola...
CVE-2017-18044-Exploit
CVE-2017-18044 原生 POC 这是一个针对 Commvault v11 SP5 及更早版本中 CVE-2017-18044 命令注入漏洞的极其简单的 POC。对于 Metasploit 用户，该利用的 Ruby 版本也包含在最新构建中。https://www.rapid7.com/db/modules/exploit/windows/misc/commvaultcmdexec 用法: comvlt root@kitploit: -h 用法 -i 主机 IP 地址（默认：127.0.0.1） -e 可执行文件的路径 -a 可执行文件的参数...
smb
███████╗███╗ ███╗██████╗ ███║ ██╔════╝████╗ ████║██╔══██╗ ║██║ ███████╗██╔████╔██║██████╔╝ ██║ ██ ║██║ ╚════██║██║╚██╔╝██║██╔══██╗ ╚██╗ ██ ╔╝██║ ███████║██║ ╚═╝ ██║██████╔╝ ╚████╔╝ ██║ ╚══════╝╚═╝ ╚═╝╚═════╝ ╚═══╝ ╚═╝ SMB是一种网络协议，允许计算机之间共享文件、打印机和其他资源。 SMB v1（服务器消息块版本1）不安全且已过时，用于网络文件共享。 SMB v1 -...
CVE-2017-0204
CVE-2017-0204...
spring-break_cve-2017-8046
spring-breakcve-2017-8046 这是一个利用 Spring Break 漏洞（CVE-2017-8046 ）的 Java 程序。 该软件的编写旨在尽可能减少外部依赖。 免责声明 此工具旨在供安全工程师和应用安全人员用于安全评估。请负责任地使用此工具。本人不对任何人使用此应用程序的方式负责。本人对因使用此工具造成的任何损害或犯下的任何罪行概不负责。 漏洞信息 CVE-ID : CVE-2017-8046 链接 : https://vulners.com/cve/CVE-2017-8046 描述 : 在 Pivotal Spring Data REST 版本 2.5.12...