Lucene search
+L

1325 matches found

Kitploit
Kitploit
added 2022/03/08 8:30 p.m.53 views

GONET-Scanner - Golang Network Scanner With Arp Discovery And Own Parser

ScreenShots Install chmod +x install.sh ./install.sh as root Usage ARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top 1000 ports like nmap -t: Set Timeout in milliseconds EXAMPLES go run...

7.1AI score
SaveExploits0References3
OSV
OSV
added 2022/02/24 10:15 p.m.10 views

CVE-2021-39363

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved...

9.8CVSS5.7AI score0.01418EPSS
SaveExploits0References3
NVD
NVD
added 2022/02/24 10:15 p.m.28 views

CVE-2021-39363

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved...

9.8CVSS0.01418EPSS
SaveExploits0References3
NVD
NVD
added 2022/02/24 10:15 p.m.30 views

CVE-2021-39364

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing for camera control after ARP cache poisoning has been achieved...

7.5CVSS0.01047EPSS
SaveExploits0References3
Prion
Prion
added 2022/02/24 10:15 p.m.20 views

Design/Logic Flaw

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved...

7.5CVSS9.4AI score0.01418EPSS
SaveExploits0References3Affected Software2
Prion
Prion
added 2022/02/24 10:15 p.m.20 views

Command injection

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing for camera control after ARP cache poisoning has been achieved...

5CVSS7.7AI score0.01047EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2022/02/24 9:13 p.m.38 views

CVE-2021-39363

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved...

9.7AI score0.01418EPSS
SaveExploits0References3
CVE
CVE
added 2022/02/24 9:13 p.m.109 views

CVE-2021-39363

CVE-2021-39363 affects Honeywell HDZP252DI (1.00.HW02.4) and HBW2PER1 (1.000.HW01.3) devices. Reported impact is a video replay attack that occurs after ARP cache poisoning is achieved. The NVD notes a high-severity, network-based vulnerability with CVSS v3.1 base score 9.8 (C:H, I:H, A:H; no pri...

9.8CVSS9.4AI score0.01418EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2022/02/24 9:13 p.m.51 views

CVE-2021-39364

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing for camera control after ARP cache poisoning has been achieved...

7.9AI score0.01047EPSS
SaveExploits0References3
CVE
CVE
added 2022/02/24 9:13 p.m.113 views

CVE-2021-39364

The CVE-2021-39364 issue affects Honeywell HDZP252DI (1.00.HW02.4) and HBW2PER1 (1.000.HW01.3). It enables command spoofing for camera control after ARP cache poisoning, per multiple connected sources. Root cause: ARP spoofing enabling spoofed commands. No exploitation details or specific mitigat...

7.5CVSS7.7AI score0.01047EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/02/24 12:00 a.m.10 views

Honeywell HDZP252DI 1.00.HW02.4和HBW2PER1 1.00. hw01.3 命令注入漏洞

Honeywell Hdzp252Di is a Performance Series Ip Camera from Honeywell USA. A security vulnerability exists in the Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.00. hw01.3 devices, which stems from the Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.00. hw01.3 devices allows for video replay after ...

9.8CVSS8.3AI score0.01418EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.24 views

Schneider Electric Quantum Ethernet Module Improper Authentication (CVE-2011-4860)

The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device aka the Quantum 140NOE771 module generates the password for the fwupgrade account by performing a calculation on the MAC address, which makes it easier for remote attackers to obtain access via a ...

10CVSS5.8AI score0.02642EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2022/02/06 8:30 p.m.44 views

Espionage - A Network Packet And Traffic Interceptor For Linux. Spoof ARP And Wiretap A Network

Espionage is a network packet sniffer that intercepts large amounts of data being passed through an interface. The tool allows users to to run normal and verbose traffic analysis that shows a live feed of traffic, revealing packet direction, protocols, flags, etc. Espionage can also spoof ARP so,...

7.4AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2022/02/05 4:19 a.m.10 views

arp-bolts.com Cross Site Scripting vulnerability OBB-2357951

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
zdt
zdt
added 2022/01/08 12:00 a.m.327 views

Microsoft Windows SMB Direct Session Takeover Exploit

This Metasploit module will intercept direct SMB authentication requests to another host, gaining access to an authenticated SMB session if successful. If the connecting user is an administrator and network logins are allowed to the target machine, this module will execute an arbitrary payload. T...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2022/01/07 12:00 a.m.329 views

Microsoft Windows SMB Direct Session Takeover

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Windows SMB Direct Session Takeover', 'Description' = %q This module will intercept direct SMB authentication requests to another host,...

7.4AI score
SaveExploits0
Oracle linux
Oracle linux
added 2021/11/16 12:00 a.m.97 views

NetworkManager security, bug fix, and enhancement update

1.32.10-4.0.1 - add connectivity check via Oracle servers Orabug: 32051972 - Disable the build of NetworkManager-config-connectivity- subpackage for 8.3 1:1.32.10-4 - revert unapproved patches part of 'cloud-setup' change rh 1977984 1:1.32.10-3 - preserve the IPv6 multicast route added by kernel ...

6.1CVSS6.6AI score0.01399EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:00 a.m.19 views

The vulnerability of the WinRAR file archiver, related to the retransmission of requests to the malicious domain, allows a hacker to execute an ARP spoofing attack.

The vulnerability of the WinRAR file archiver is related to the way requests are redirected to the malicious domain when loading the dynamic library mshtml.dll. Exploiting this vulnerability allows a perpetrator to execute an “ARP spoofing” attack using a specially created malware file...

3.4CVSS5.6AI score
SaveExploits0References3Affected Software1
The Hacker News
The Hacker News
added 2021/10/21 1:16 p.m.120 views

Bug in Popular WinRAR Software Could Let Attackers Hack Your Computer

A new security weakness has been disclosed in the WinRAR trialware file archiver utility for Windows that could be abused by a remote attacker to execute arbitrary code on targeted systems, underscoring how vulnerabilities in such software could beсome a gateway for a roster of attacks. Tracked a...

7.8CVSS1.6AI score0.00331EPSS
SaveExploits0
NVD
NVD
added 2021/08/19 4:15 p.m.22 views

CVE-2021-29280

In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow...

6.4CVSS0.00754EPSS
SaveExploits1References2
Rows per page
Query Builder