28 matches found
bluebox
Bluebox 작업 진행 중 다양한 VoIP 제품을 위한 익스플로잇 모음입니다. Go Exploit Framework에 감사드립니다. VoIP 침투 테스트 솔루션을 찾고 계셨다면 Sippts Kali의 sippts-gui 또는 SIPVicious를 확인해보세요. 이 프로젝트는 주로 익스플로잇 단계에 초점을 맞추고 있습니다. 설치 git clone https://github.com/jesusprubio/bluebox.git cd bluebox go mod tidy go mod vendor 사용법 Go Exploit Framewo...
bluebox
참고: 이 저장소는 외부 저장소Git 서브모듈를 참조합니다. 이 저장소를 클론한 후에는 다음 명령을 실행하여 해당 서브모듈을 클론해야 합니다: git submodule init git submodule update BlueBox BlueBox는 MS15-122 및 MS16-014의 자동화된 익스플로잇을 위한 스크립트와 구성 파일 모음입니다CVE-2015-6095 및 CVE-2016-0049 참조. 이 취약점에 대한 추가 정보는 이 주제에 관한 BlackHat EU 2015 프레젠테이션 및 백서 또는 BSides Seattle...
BlueBox
BlueBox 악성코드 분석 박스 및 사이버 위협 헌팅 무엇인가요? 악성코드, IP, 도메인, URL에 대한 위협 인텔리전스 데이터? 의심스러운 파일 또는 악성코드에 대한 빠른 분석! BlueBox는 특정 파일, IP, 도메인, URL에 대한 위협 인텔리전스 데이터를 수집하고 분석하는 OSINT오픈소스 인텔리전스 솔루션입니다. 포함된 기능 / 특징 악성코드 및 관측 가능한 지표IP, 도메인, URL, 해시에 대한 위협 인텔리전스 강화 제공 확장성 과 위협 정보 검색 속도 향상 을 위해 설계된 애플리케이션 Python3,...
CVE-2026-14704
A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could ...
CVE-2026-14704 stephen-kruger bluebox cross site scripting
A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could ...
CVE-2026-14704
A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could ...
CVE-2026-14704
CVE-2026-14704 affects the Stephen-Kruger bluebox project up to version 4.5.12. The vulnerability arises from manipulation of an unnamed argument, enabling cross-site scripting. Exploitation is possible remotely, and public PoCs exist. The issue was brought to the project’s attention via an issue...
CVE-2026-14704 stephen-kruger bluebox cross site scripting
A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could ...
EUVD-2026-41725
A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could ...
CVE-2026-14704 stephen-kruger bluebox cross site scripting
A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could ...
PT-2026-55765
A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could ...
CVE-2026-14704: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could ...
Mitel 6869i Voip Deskphone 4.2.2032 Command Injection Vulnerability
Mitel 6869i Voip Deskphone version 4.2.2032 suffer from an unauthenticated command injection vulnerability. Vendor: Mitel Affected Products: Mitel 6869i Voip Deskphone Version 4.2.2032 - SIP Not Affected: unknown Vulnerability: Mitel 6869i SIP Deskphone 4.2.2032: Unauthenticated Bash Command...
Mitel 6869i Voip Deskphone 4.2.2032 Command Injection
BlueBox Security http://www.bluebox-security.de/ securityatbluebox-security.de bbs-2019.001.txt 08-August-2019 Vendor: Mitel Affected Products: Mitel 6869i Voip Deskphone Version 4.2.2032 - SIP Not Affected: unknown Vulnerability: Mitel 6869i SIP Deskphone 4.2.2032: Unauthenticated Bash Command...
5 Biggest Hosting Companies hacked by Syrian Electronic Army
Once again, Syrian Electronic Army SEA has gain media attention by compromising a number of popular web hosting brands of one of the leading web-hosting companies Endurance International Group INC that manages over 60 different hosting brands. SEA, a pro-hacker group supposed to be aligned with...
Android new vulnerability exposure: hack may fake and authentic applications-vulnerability warning-the black bar safety net
Ticker 7 on 3 0 September morning news, on Tuesday released a study on the display, the Google Android operating system has a security vulnerability that can allow a hacker to fake a trusted formal application, thereby hijacking the user's smartphone or tablet. The security company Bluebox Securi...
Android "Fake ID" Vulnerability Allows Malware to Impersonate Trusted Apps
Due to the majority in the mobile platform, Google’s Android operating system has been a prior target for cybercriminals and a recently exposed weakness in the way the operating system handles certificate validation, left millions of Android devices open to attack. Researchers at BlueBox security...
Critical Android FakeID Bug Allows Attackers to Impersonate Trusted Apps
There is a critical vulnerability in millions of Android devices that allows a malicious app to impersonate a trusted application in a transparent way, enabling an attacker to take a number of actions, including inserting malicious code into a legitimate app or even take complete control of an...
Jeff Forristal on the Android Master-Key Vulnerability
When news of the Android master-key vulnerability began leaking out in early July, details were hard to come by, and that was done intentionally. The researchers at Bluebox Security, a mobile-security start-up, had discovered the vulnerability and were planning to disclose the details of the bug ...
Chinese Hackers discovered second Android master key vulnerability
Android Security Squad, the China-based group that uncovered a second Android master key vulnerability that might be abused to modify smartphone apps without breaking their digital signatures. The whole point of digitally signing a document or file is to prove the file hasn't been modified. The...