Lucene search
+L

4140 matches found

exploitpack
exploitpack
•added 2018/05/28 12:00 a.m.•38 views

Sony Playstation 4 (PS4) 5.07 - Jailbreak WebKit bpf v2 Kernel Loader

Sony Playstation 4 PS4 5.07 - Jailbreak WebKit bpf v2 Kernel Loader PS4 5.05 Kernel Exploit --- Summary In this project you will find a full implementation of the second "bpf" kernel exploit for the PlayStation 4 on 5.05. It will allow you to run arbitrary code as kernel, to allow jailbreaking an...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2018/05/18 12:00 a.m.•28 views

SAP NetWeaver Web Dynpro Information Disclosure

Application: SAP NetWeaver Web Dynpro 6.4 to 7.5 - Information disclosure Versions Affected: SAP NetWeaver 6.4 - 7.5 Vendor URL: http://SAP.com Bugs: Information disclosure Enumerate users Sent: 2016-12-15 Reported: 2016-12-15 Date of Public Advisory: 09.02.2016 Reference: SAP Security Note 23445...

7.4AI score
SaveExploits0
HackRead
HackRead
•added 2018/05/12 10:48 p.m.•99 views

Anonymous hacks Russian Govt website against ongoing censorship

By Waqas On May 10th, 2018, the online hacktivist group Anonymous conducted a This is a post from HackRead.com Read the original post: Anonymous hacks Russian Govt website against ongoing censorship...

2.6AI score
SaveExploits0
CNVD
CNVD
•added 2018/05/11 12:00 a.m.•19 views

Red Hat Wildfly Server Anonymous Login Vulnerability

Red Hat Wildfly formerly known as JBoss Application Server is a U.S. Red Hat Red Hat company based on JavaEE open source application server. A security vulnerability exists in Red Hat WildFly version 10.1.2.Final. An attacker could exploit the vulnerability to access the server without...

10CVSS6.8AI score0.08255EPSS
SaveExploits2References1
OSV
OSV
•added 2018/05/09 8:29 a.m.•16 views

CVE-2018-10682

An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on TCP port 9990 without any authentication using "anonymous" access that is automatically created. Once logged in, a misconfiguration present by default auto-deployment permits an...

9.8CVSS6.1AI score0.08255EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2018/05/09 8:00 a.m.•37 views

CVE-2018-10682

An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on TCP port 9990 without any authentication using "anonymous" access that is automatically created. Once logged in, a misconfiguration present by default auto-deployment permits an...

10AI score0.08255EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/05/09 12:00 a.m.•10 views

PT-2018-10050 · Red Hat · Wildfly

Name of the Vulnerable Software and Affected Versions: WildFly version 10.1.2.Final Description: An issue allows an attacker to access the administration panel without authentication using anonymous access. Once logged in, a misconfiguration permits an anonymous user to deploy a malicious .war...

10CVSS10AI score0.08255EPSS
SaveExploits2References3
NVD
NVD
•added 2018/05/08 8:29 p.m.•35 views

CVE-2017-2606

Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible SECURITY-380. This only affects anonymous users other users legitimately have access that were able to get a list of items via an...

4.3CVSS4.3AI score0.01843EPSS
SaveExploits0References4
OSV
OSV
•added 2018/05/08 8:29 p.m.•34 views

CVE-2017-2606

Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible SECURITY-380. This only affects anonymous users other users legitimately have access that were able to get a list of items via an...

4.3CVSS4.7AI score
SaveExploits0References4
CNVD
CNVD
•added 2018/05/07 12:00 a.m.•12 views

Onvif protocol anonymous access vulnerability in yestv cameras

Yestv yestv camera is wireless network wifi smart monitor. Yestv cameras have an anonymous access vulnerability in the onvif protocol. The vulnerability is due to call onvif protocol interface to arbitrarily modify the network configuration, arbitrary reboot device, the attacker can write a messa...

7.1AI score
SaveExploits0
zdt
zdt
•added 2018/04/26 12:00 a.m.•50 views

Jfrog Artifactory < 4.16 - Unauthenticated Arbitrary File Upload / Remote Command Execution Vulne

Exploit for linux platform in category web applications Exploit Title: Jfrog Artifactory alert/Vulnerable/" within the file app.html : POST /artifactory/ui/artifact/upload HTTP/1.1 Host: removed User-Agent: removed Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8...

0.25645EPSS
SaveExploits5
OSV
OSV
•added 2018/04/25 6:29 p.m.•14 views

CVE-2018-10208

An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is anonymous reflected XSS on the error page via a /share/error?message= URI...

6.1CVSS5.8AI score0.00797EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2018/04/22 2:39 a.m.•15 views

alcoholics-anonymous.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-606166 Description| Value ---|--- Affected Website:| alcoholics-anonymous.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
OSV
OSV
•added 2018/04/18 3:45 p.m.•9 views

DRUPAL-CONTRIB-2018-018

This module helps in exporting and importing Menu Items via the administrative interface. The module does not properly restrict access to administrative pages, allowing anonymous users to export and import menu links. There is no mitigation for this vulnerability...

6.8AI score
SaveExploits0References1
Drupal
Drupal
•added 2018/04/18 12:00 a.m.•24 views

Menu Import and Export - Critical - Access bypass - SA-CONTRIB-2018-018

This module helps in exporting and importing Menu Items via the administrative interface. The module does not properly restrict access to administrative pages, allowing anonymous users to export and import menu links. There is no mitigation for this vulnerability...

6.6AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2018/04/11 1:09 p.m.•41 views

Mercury - A Hacking Tool Used To Collect Information And Use The Information To Further Hurt The Target

Mercury is a hacking tool used to collect information and use the information to further hurt the target. Installation Requires Python2 Linux apt-get install python2 git clone https://www.github.com/MetaChar/Mercury pip install -r requirements.txt Features BruteForce Mercury uses Selenium to...

7.1AI score
SaveExploits0References1
Gentoo Linux
Gentoo Linux
•added 2018/03/19 12:00 a.m.•104 views

JabberD 2.x: Multiple vulnerabilities

Background JabberD 2.x is an open source Jabber server written in C. Description Multiple vulnerabilities have been discovered in Gentoo’s JabberD 2.x ebuild. Please review the referenced CVE identifiers for details. Impact An attacker could possibly escalate privileges by owning system binaries ...

9.8CVSS8.6AI score0.0289EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2018/03/19 12:00 a.m.•33 views

GLSA-201803-07 : JabberD 2.x: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201803-07 JabberD 2.x: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Gentoos JabberD 2.x ebuild. Please review the referenced CVE identifiers for details. Impact : An attacker could possibly escalate...

9.8CVSS7.3AI score0.0289EPSS
SaveExploits0References4
zdt
zdt
•added 2018/02/28 12:00 a.m.•36 views

Sony Playstation 4 (PS4) 4.55 - Jailbreak (WebKit 5.01 / bpf Kernel Loader 4.55) Exploit

Exploit for hardware platform in category remote exploits PS4 4.55 Kernel Exploit --- Summary In this project you will find a full implementation of the "bpf" kernel exploit for the PlayStation 4 on 4.55. It will allow you to run arbitrary code as kernel, to allow jailbreaking and kernel-level...

7.1AI score
SaveExploits0
n0where
n0where
•added 2018/02/23 7:29 a.m.•116 views

Open-Source Whistleblowing Framework: GlobaLeaks

GlobaLeaks is an open-source, free software intended to enable secure and anonymous whistleblowing initiatives developed by the Hermes Center for Transparency and Digital Human Rights . It is an Open Whistleblowing Framework that can be used in many different usage scenarios that may require very...

7.9AI score
SaveExploits0References5
Rows per page
Query Builder