LetMeFuckIt-Scanner

LetMeFuckIt Scanner AutoPWNED 스캐너 및 Magento 익스플로잇 이 스캐너는 Magento의 SQLi 취약점 1.9.1.0 CE을 탐색합니다. 이 취약점은 Patch SUPEE-5344 에서 수정되었으나, 스캐너는 보안 패치를 적용하지 않은 시스템을 찾아 테스트하는 데 사용됩니다. LetMeFuckIt 은 Python으로 작성되었으며 다음 라이브러리를 사용합니다: pygoogle, argparse, urllib2, requests, base64 사용법: letmefuckit.py --dork --pag...

Magento-eCommerce-RCE-CVE-2015-1397

Magento Shoplift Exploit SUPEE-5344 - CVE-2015-1397 개요 이 스크립트는 Magento의 CVE-2015-1397 취약점일반적으로 Magento Shoplift 익스플로잇을 이용합니다. 공격자는 SQL 페이로드를 주입하여 Magento 데이터베이스에 새로운 관리자 사용자를 생성할 수 있습니다. 원래 Manish Kishan Tanwar error1046 님이 Python으로 작성한 것을 Divine Clown 0xDTC 님이 Bash로 변환하고, 사용자 친화적인 자격 증명 입력 프롬프트를...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-003030)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003030 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. Tenable has extracted the preceding description block directly from the Unity Linux securi...

CVE-2008-5344 vulnerabilities

Vulnerabilities for packages: openjdk-25-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-8-openj9...

MINI-5344-GPF8-H4Q8

Bulletin has no description...

MiracleLinux 7 : vim-7.4.629-8.0.1.el7.AXS7 (AXSA:2024-8627:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8627:01 advisory. CVE-2023-0054: check the return value of vimregsub CVE-2023-0049: avoid going over the NUL at the end CVE-2023-0288: prevent the cursor from moving ...

CVE-2025-5344

creationtimestamp| type| source ---|---|--- 2025-07-17 15:21:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu6abznz4i2w...

CVE-2025-5344

CVE-2025-5344 affects Bluebird devices with a pre-loaded kiosk application exposing an unsecured AIDL-type service, com.bluebird.kiosk.launcher.IpartnerKioskRemoteService . A local attacker can bind this service to modify the device’s global settings and wallpaper. The issue affects all versions ...

CVE-2025-5344 Exposed AIDL service allowing for tampering of system secure settings in Bluebird kiosk application

Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemoteService". A local attacker can bind to the AIDL-type service to modify device's global settings and wallpaper image. This issue affects a...

TencentOS Server 4: vim (TSSA-2024:1005)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1005 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2012-5344

Directory traversal vulnerability in the WebServer Thttpd.bat in IpTools aka Tiny TCP/IP server 0.1.4 allows remote attackers to read arbitrary files via a .. dot dot in a HTTP request...

Linux Distros Unpatched Vulnerability : CVE-2023-5344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. CVE-2023-5344 Note that Nessus relies on the presence of the package as reported by t...

CVE-2024-5344 The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget

The The Plus Addons for Elementor Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘forgoturl’ attribute within the plugin's WP Login & Register widget in all versions up to, and including, 5.5.6 due to insufficient input sanitization and output escaping...

WordPress The Plus Addons for Elementor Pro Plugin <= 5.5.6 is vulnerable to Cross Site Scripting (XSS)

Software The Plus Addons for Elementor Pro Type Plugin Vulnerable versions = 5.5.6 Fixed in 5.6.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5344 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 01ee398507f7 Credits...

EulerOS Virtualization 3.0.6.6 : vim (EulerOS-SA-2024-1669)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. CVE-2023-5344 Note that Tenable Network Security has...

EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2024-1708)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. CVE-2023-2609 - Vim is an improved version of the good old...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-1708)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-1669)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-1393)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for vim (SUSE-SU-2023:4587-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...