GHSA-322M-P39J-R5M2 npm-script-demo is malware

The npm-script-demo package is a piece of malware that opens a connection to a command and control server and executed the instructions it is given. It has been removed from the npm registry. Recommendation Any computer that has this package installed or running should be considered fully...

GHSA-M362-87JC-F39V Directory Traversal in uv-tj-demo

Affected versions of uv-tj-demo resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

Directory Traversal in uv-tj-demo

Affected versions of uv-tj-demo resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

xtalk-demo (>=0.0.2, <=0.0.8) potentially affected by CVE-2017-16091 via xtalk (>=0.0.3, <=0.0.5)

xtalk NPM version =0.0.3, =0.0.2, =0.0.8 Source cves: CVE-2017-16091 Source advisory: OSV:GHSA-CQV6-7FWC-8M3C...

XenForo 2.1.10 Patch 2 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: XenForo v2.1.10 Patch 2 Stored XSS Author: Vincent666 ibn Winnie Software Link: https://xenforo.com/demo/ Tested on: Windows 10 Web Browser: Mozilla Firefox Blog :https://pentest-vincent.blogspot.com/ PoC...

XenForo 2.1.10 Patch 2 Cross Site Scripting

Exploit Title: XenForo v2.1.10 Patch 2 Stored XSS Date:16.08.2020 Author: Vincent666 ibn Winnie Software Link: https://xenforo.com/demo/ Tested on: Windows 10 Web Browser: Mozilla Firefox Blog :https://pentest-vincent.blogspot.com/ PoC...

vBulletin 5.6.2 Cross Site Scripting

Exploit Title: vBulletin 5.6.2 Cross Site Scripting Date:12.08.2020 Author: Vincent666 ibn Winnie Software Link: https://www.vbulletin.com/en/features/ Tested on: Windows 10 Web Browser: Mozilla Firefox Blog : https://pentest-vincent.blogspot.com/ PoC:...

Exploit for CVE-2020-6519

Chromium 83 Zero Day Full CSP Bypass Cross Platforms CVE-...

demo-fixes.fusiondirectory.org Cross Site Scripting vulnerability OBB-1244131

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

bluescan

This is a Python script for a Bluetooth scanner, specifically designed to scan for devices, services, and vulnerabilities. The script is called "bluescan" and is available on GitHub. The script is based on the BlueZ Bluetooth protocol stack and uses the libbluetooth-dev package. It can be install...

Exploit for Missing Authentication for Critical Function in Sap Netweaver_Application_Server_Java

CVE-2020-6287-exploit PoC for CVE-2020-6287 The PoC in...

Exploit for Improper Handling of Exceptional Conditions in Sockjs_Project Sockjs

CVE-2020-7693: Meteor A demo Meteor app running the vuln...

Exploit for Incorrect Calculation in Google Android

BluefragCVE-2020-0022 This is a RCE bluetooth vulnerability o...

@pho-nomenal/5-minute-github-demo (>=6.0.3, <=21.5.1), eject-media (>=0.0.1, <=0.0.2) +2 more potentially affected by CVE-2020-7628 via umount (1.1.6)

umount NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on umount and may be impacted: - @pho-nomenal/5-minute-github-demo =6.0.3, =0.0.1, =0.1.1, =1.1.0, =1.1.4 Source cves: CVE-2020-7628 Source advisory: OSV:GHSA-6Q48-VJQ2-MWCJ...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

SMBGhost CVE-2020-0796 Automate Exploitation and Detection...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

SMBv3 Ghost...

Impost3r - A Linux Password Thief

Impost3r is a tool that aim to steal many kinds of linux passwordsincluding ssh,su,sudo written by C. Attackers can use Impost3r to make a trap to steal the legal user's passwords XD This tool is limited to security research and teaching, and the user bears all legal and related responsibilities...

ParamKit - A Small Library Helping To Parse Commandline Parameters

A small library helping to parse commandline parameters for Windows. Objectives "like Python's argparse but for C/C++" compact and minimalistic easy to use extendable Demo Print help for each parameter: Easily store values of popular types, and verify if all required parameters are filled: Verify...

Exploit for OS Command Injection in Atom Electron

CVE-2018-1000006-DEMO The Demo for CVE-2018-1000006 Analysis Electron v1.8.2-beta.4 远程命令执行漏洞—【CVE-2018-1000006】 POC 可以直接使用 elecrce\elecrce-win32-x64\elecrce.exe 也可以自己打包成exe应用,生成有漏洞的版本应用，以版本1.7.8为例： electron-packager ./test elecrce --win --out ./elecrce --arch=x64 --version=0.0.1...

Flush Demo Special Edition suffers from dll hijacking vulnerability

Flush simulation stock speculation special edition is a real simulation stock speculation software trading system. Flush simulation special version of the existence of dll hijacking vulnerability, an attacker can use the vulnerability to execute arbitrary code...