Lucene search
+L

2679 matches found

Kitploit
Kitploit
added 2017/10/14 10:0 p.m.113 views

Anti-DDOS - Anti DDOS Bash Script

Programming Languages : BASH RUN root@ismailtasdelen: bash ./anti-ddos.sh Cloning an Existing Repository Clone with HTTPS git clone https://github.com/ismailtasdelen/Anti-DDOS.git Cloning an Existing Repository Clone withSSH git clone [email protected]:ismailtasdelen/Anti-DDOS.git Download...

7.3AI score
SaveExploits0References1
Node.js
Node.js
added 2017/10/04 11:29 p.m.83 views

Exfiltrates data on installation

Overview The coffe-script package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found coffe-script installed in...

5CVSS4.7AI score0.01123EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2017/10/04 11:28 p.m.77 views

Exfiltrates data on installation

Overview The coffescript package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found coffescript installed in...

5CVSS3.8AI score0.01123EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2017/10/04 11:27 p.m.78 views

Exfiltrates data on installation

Overview The cofeescript package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found cofeescript installed in...

5CVSS3.7AI score0.01177EPSS
SaveExploits0Affected Software1
Node.js
Node.js
added 2017/10/04 11:26 p.m.86 views

Exfiltrates data on installation

Overview The cofee-script package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found cofee-script installed in...

5CVSS4.7AI score0.01177EPSS
SaveExploits0Affected Software1
Exploit DB
Exploit DB
added 2017/10/02 12:0 a.m.213 views

Qmail SMTP - Bash Environment Variable Injection (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Qmail SMTP Bash Environment Variable Injection Shellshock', 'Description' = %q This module exploits a shellshock vulnerability on Qmail, a public...

10CVSS8.3AI score0.99999EPSS
SaveExploits139
0day.today
0day.today
added 2017/09/30 12:0 a.m.456 views

Qmail SMTP Bash Environment Variable Injection (Shellshock) Exploit

This Metasploit module exploits a shellshock vulnerability on Qmail, a public domain MTA written in C that runs on Unix systems. Due to the lack of validation on the MAIL FROM field, it is possible to execute shell code on a system with a vulnerable BASH Shellshock. This flaw works on the latest...

10CVSS10AI score0.99999EPSS
SaveExploits139
Packet Storm
Packet Storm
added 2017/09/29 12:0 a.m.159 views

Qmail SMTP Bash Environment Variable Injection (Shellshock)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Qmail SMTP Bash Environment Variable Injection Shellshock', 'Description' = %q This module exploits a shellshock vulnerability on Qmail, a public...

10CVSS1.4AI score0.99999EPSS
SaveExploits139
Tenable Nessus
Tenable Nessus
added 2017/09/11 12:0 a.m.31 views

Slackware 13.1 / 13.37 / 14.0 / 14.1 / 14.2 : bash (SSA:2017-251-01)

New bash packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and 14.2 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-251-01. The text itself is...

8.4CVSS6.3AI score0.06019EPSS
SaveExploits0References3
Slackware Linux
Slackware Linux
added 2017/09/08 6:6 p.m.52 views

[slackware-security] bash

New bash packages are available for Slackware 13.1, 13.37, 14.0, 14.1, and 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bash-4.3.048-i586-1slack14.2.txz: Upgraded. This update fixes two security issues found in bash before 4.4: The expansio...

8.4CVSS8.6AI score0.00576EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/09/08 12:0 a.m.29 views

EulerOS 2.0 SP2 : bash (EulerOS-SA-2017-1164)

According to the versions of the bash package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An arbitrary command injection flaw was found in the way bash processed the hostname value. A malicious DHCP server could use this flaw to execute...

8.4CVSS6.9AI score0.06019EPSS
SaveExploits0References3
Amazon
Amazon
added 2017/08/31 12:0 a.m.62 views

Medium: bash

Issue Overview: popd controlled free: A denial of service flaw was found in the way bash handled popd commands. A poorly written shell script could cause bash to crash resulting in a local denial of service limited to a specific bash session.CVE-2016-9401 Arbitrary code execution via malicious...

8.4CVSS7.9AI score0.06019EPSS
SaveExploits0
OSV
OSV
added 2017/08/28 3:29 p.m.3 views

ALPINE-CVE-2016-0634

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine...

7.5CVSS7.8AI score0.06019EPSS
SaveExploits0References1
NVD
NVD
added 2017/08/28 3:29 p.m.23 views

CVE-2016-0634

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine...

7.5CVSS6.3AI score0.06019EPSS
SaveExploits0References15
OSV
OSV
added 2017/08/28 3:29 p.m.43 views

CVE-2016-0634

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine...

7.5CVSS7.6AI score
SaveExploits0References15
OSV
OSV
added 2017/08/28 3:29 p.m.2 views

DEBIAN-CVE-2016-0634

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine...

7.5CVSS7AI score0.06019EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2017/08/28 3:0 p.m.15 views

CVE-2016-0634

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine...

7.5AI score0.06019EPSS
SaveExploits0References15
Cvelist
Cvelist
added 2017/08/28 3:0 p.m.32 views

CVE-2016-0634

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine...

6.9AI score0.06019EPSS
SaveExploits0References15
CVE
CVE
added 2017/08/28 3:0 p.m.201 views

CVE-2016-0634

CVE-2016-0634 concerns Bash 4.3 where expansion of '\h' in the prompt string can trigger arbitrary code execution when a hostname contains shell metacharacters. The vulnerability is triggered by a remote attacker with authenticated access (e.g., via DHCP-influenced hostname) and can result in arb...

7.5CVSS6.8AI score0.06019EPSS
SaveExploits0References15Affected Software1
AlpineLinux
AlpineLinux
added 2017/08/28 3:0 p.m.35 views

CVE-2016-0634

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine...

7.5CVSS7.1AI score0.06019EPSS
SaveExploits0
Rows per page
Query Builder