Lucene search
K

1501 matches found

n0where
n0where
added 2017/02/14 6:41 a.m.16 views

Python Remote Administration Tool: Stitch

Python Remote Administration Tool This is a cross platform python framework which allows you to build custom payloads for Windows, Mac OSX and Linux as well. You are able to select whether the payload binds to a specific IP and port, listens for a connection on a port, option to send an email of...

0.6AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/02/07 12:0 a.m.31 views

Trend Micro Control Manager modDLPViolationCnt_drildown Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widget's modDLPViolationCntdrildown.php script. The issue lies in the lack...

6.8CVSS7.5AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/02/07 12:0 a.m.15 views

Trend Micro Control Manager dlp_policy Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetold's dlppolicy.php script. The issue lies in the lack of proper...

6.8CVSS7.5AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/02/07 12:0 a.m.16 views

Trend Micro Control Manager modDLPViolationCnt_drildown Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetoldSP1's modDLPViolationCntdrildown.php script. The issue lies in th...

6.8CVSS7.5AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/02/07 12:0 a.m.45 views

Trend Micro Control Manager modDLPViolationCnt_drildown Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetold's modDLPViolationCntdrildown.php script. The issue lies in the...

6.8CVSS7.5AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/02/07 12:0 a.m.21 views

Trend Micro Control Manager dlp_policy Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetoldSP1's dlppolicy.php script. The issue lies in the lack of proper...

6.8CVSS7.5AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/02/07 12:0 a.m.37 views

Trend Micro Control Manager importFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widget's importFile.php script. The issue lies in the lack of proper...

6.8CVSS7.5AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/02/07 12:0 a.m.65 views

Trend Micro Control Manager download Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widget's download.php script. The issue lies in the lack of proper...

4.3CVSS3.3AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/02/07 12:0 a.m.27 views

Trend Micro Control Manager modDLPTemplateMatch_drildown Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetoldSP1's modDLPTemplateMatchdrildown.php script. The issue lies in t...

6.8CVSS7.5AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/02/07 12:0 a.m.18 views

Trend Micro Control Manager importFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the importFile.php script. The issue lies in the failure to properly...

6.8CVSS7.5AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/02/07 12:0 a.m.25 views

Trend Micro Control Manager modDLPTemplateMatch_drildown Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetold's modDLPTemplateMatchdrildown.php script. The issue lies in the...

6.8CVSS7.5AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/02/07 12:0 a.m.16 views

Trend Micro Control Manager modDLPTemplateMatch_drildown Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widget's modDLPTemplateMatchdrildown.php script. The issue lies in the lac...

6.8CVSS7.5AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/02/07 12:0 a.m.16 views

Trend Micro Control Manager download Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetsnew's download.php script. The issue lies in the lack of...

4.3CVSS3.5AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/01/20 12:0 a.m.38 views

Brocade Network Advisor CliMonitorReportServlet Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Brocade Network Advisor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CliMonitorReportsServlet servlet. The issue results from the lack ...

7.8CVSS1.7AI score0.05091EPSS
Exploits0References1
0day.today
0day.today
added 2017/01/06 12:0 a.m.33 views

Android maxdsm Driver Kernel Information Disclosure Vulnerability

Exploit for Android platform in category local exploits Android: Kernel information disclosure in "maxdsmread" The "maxdsm" driver exposes several character devices which can be used to control and calibrate the device. One such device is the "control device", exposed under: "/dev/dsmctrldev". Th...

6.8AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2016/12/13 12:0 a.m.20 views

Advantech SUSIAccess Server downloadCSV file Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Advantech SUSIAccess Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of downloadCSV.jsp. When parsing the file element, the...

7.8CVSS3.1AI score0.23687EPSS
Exploits8References1
Zero Day Initiative
Zero Day Initiative
added 2016/12/13 12:0 a.m.26 views

Attachmate Host Access Management and Security Server PassThru Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Attachmate Host Access Management and Security Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PassThru resource. The issue results...

5CVSS0.1AI score0.00851EPSS
Exploits0References1
Kitploit
Kitploit
added 2016/10/26 9:12 p.m.37 views

PCILeech - Direct Memory Access (DMA) Attack Software

The PCILeech use the USB3380 chip in order to read from and write to the memory of a target system. This is achieved by using DMA over PCI Express. No drivers are needed on the target system. The USB3380 is only able to read 4GB of memory natively, but is able to read all memory if a kernel modul...

7.3AI score
Exploits0References1
Prion
Prion
added 2016/08/13 1:59 a.m.8 views

Design/Logic Flaw

SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service program crash via an invalid file name in an archive file, aka SAP Security Note 2312905...

2.1CVSS7.1AI score0.01959EPSS
Exploits5References7
Cvelist
Cvelist
added 2016/08/12 4:0 p.m.21 views

CVE-2016-5845

SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service program crash via an invalid file name in an archive file, aka SAP Security Note 2312905...

5.4AI score0.01959EPSS
Exploits5References7
Rows per page
Query Builder