CVE-2019-9053-Exploit-in-Python-3

CVE-2019-9053-Exploit-in-Python-3 这是一个用于 TryHackMe 的 EasyCTF 的漏洞利用代码 然而，Kali Linux 中内置的或来自 exploitDB 的代码是过时的 Python 2 代码。 这是对该代码的重写，并且在破解密码哈希时进行了一些修订，因为使用 Python 3 运行时存在一个 bug。 这样你就可以按预期方式运行 EasyCTF，而不会出现任何错误。...

EUVD-2015-0922

Malware in sbrugna...

EUVD-2015-0921

Malware in sbrugna...

EUVD-2015-0920

Malware in sbrugna...

EasyCTF Unauthorized Access Vulnerability

EasyCTF is a CGI program for scoring CTFs. EasyCTF fails to properly verify session IDs, allowing remote attackers to gain unauthorized access via special HTTP requests...

EasyCTF Cross-Site Scripting Vulnerability

EasyCTF is a CGI program for scoring CTFs. EasyCTF suffers from an unspecified cross-site scripting vulnerability that could be exploited by remote attackers to inject malicious script or HTML code, which could be used to gain access to sensitive information or hijack user sessions when malicious...

EasyCTF Arbitrary File Content Write Vulnerability

EasyCTF is a CGI program for scoring CTFs. EasyCTF has an unspecified security vulnerability that could be exploited by remote attackers to write arbitrary executable content to a file...

CVE-2015-0914

EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request...

CVE-2015-0913

Cross-site scripting XSS vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0912

EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors...

Code injection

EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors...

Cross site request forgery (csrf)

EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request...

Cross site scripting

Cross-site scripting XSS vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0913

CVE-2015-0913 affects EasyCTF (server-side CGI) with a cross-site scripting (CWE-79) vulnerability that allows remote authenticated users to inject arbitrary script/HTML via unspecified vectors. The connected JVN/NVD entries indicate EasyCTF versions 1.3 and earlier are vulnerable. Root cause: in...

CVE-2015-0914

EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request...

CVE-2015-0912

EasyCTF is a server-side CGI scoring tool. A vulnerability (CWE-22) allows a remote attacker to create arbitrary files on the server, which may lead to arbitrary code execution. Affected products: EasyCTF 1.3 and earlier. Root cause involves improper handling of file writes (arbitrary file creati...

CVE-2015-0912

EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors...

CVE-2015-0914

CVE-2015-0914 affects EasyCTF prior to 1.4. The vulnerability is a session management weakness (CWE-639) where session IDs are not validated, allowing a remote attacker to gain unauthorized access via a crafted HTTP request. Impact stated: possible login and information disclosure without credent...

CVE-2015-0913

Cross-site scripting XSS vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

EasyCTF vulnerable to cross-site scripting

Overview EasyCTF is a server side CGI used to score CTF Capture The Flag. EasyCTF contains a cross-site scripting vulnerability CWE-79 that can be leveraged by an attacker created account. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...