GTalk Password Finder 2.2.1 - 'Key' Denial of Service (PoC)

Exploit Title: GTalk Password Finder 2.2.1 - 'Key' Denial of Service PoC Exploit Author: Ismail Tasdelen Exploit Date: 2020-01-16 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/gpwdfindersetup.exe Tested on OS: Windows 10 CVE : N/A ''' Proof of...

ThinkPHP Arbitrary File Creation and Deletion Vulnerability

ThinkPHP is a lightweight homegrown PHP development framework created to simplify enterprise-level application development and agile WEB application development. ThinkPHP has an arbitrary file creation and deletion vulnerability, which can be exploited by attackers to create arbitrary files and...

CVE-2020-0641

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...

CVE-2020-0641

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...

CVE-2020-0641

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...

CVE-2020-5196

Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an authenticated attacker to create files, display hidden files, list directories, and list files without the permission to zip and download or unzip and upload files. There are multiple ways to bypass certain...

CVE-2020-5196

Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 is affected. An authenticated attacker could bypass permissions via the zip/unzip features to create files, view hidden files, and list directories/files without having zip/download (or unzip/upload) rights. The root caus...

Microsoft Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the...

CVE-2020-0641: Undefined Security Weakness

An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...

PT-2020-1318

Name of the Vulnerable Software and Affected Versions Windows Media Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability in Windows Media Service, allowing file creation in arbitrary locations. To exploit this, an attacker must first...

Backup Key Recovery 2.2.5 - Name Denial of Service (PoC)

Backup Key Recovery 2.2.5 - Name Denial of Service PoC Exploit Title: Backup Key Recovery 2.2.5 - 'Name' Denial of Service PoC Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software :...

JDK: Unrestricted access to diagnostic operations

From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks...

Unspecified Vulnerability in Multiple HPE Products

HPE SimpliVity 380 Gen 9 and others are a server from Hewlett Packard Enterprise HPE in the United States. A security vulnerability exists in several HPE products. An attacker could exploit the vulnerability to create and delete arbitrary files...

Backup Key Recovery Recover Keys Crashed Hard Disk Drive 2.2.5 - Key Denial of Service (PoC)

Backup Key Recovery Recover Keys Crashed Hard Disk Drive 2.2.5 - Key Denial of Service PoC Exploit Title: Backup Key Recovery Recover Keys Crashed Hard Disk Drive 2.2.5 - 'Key' Denial of Service PoC Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage :...

SpotFTP FTP Password Recovery 3.0.0.0 Denial Of Service

Exploit Title: SpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service PoC Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/spotftpsetup.exe Tested on OS: Windows 10 CVE : N/A ''' Proo...

NBMonitor 1.6.6.0 Denial Of Service

Exploit Title: NBMonitor 1.6.6.0 - 'Key' Denial of Service PoC Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nbmonitor.com/downloads/nbmonitorsetup.exe Tested on OS: Windows 10 CVE : N/A ''' Proof of Concept PoC:...

NetShareWatcher 1.5.8.0 - Key Denial of Service (PoC)

NetShareWatcher 1.5.8.0 - Key Denial of Service PoC Exploit Title: NetShareWatcher 1.5.8.0 - 'Key' Denial of Service PoC Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software :...

ShareAlarmPro Advanced Network Access Control - Key Denial of Service (PoC)

ShareAlarmPro Advanced Network Access Control - Key Denial of Service PoC Exploit Title: ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service PoC Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software :...

Dnss Domain Name Search Software - Name Denial of Service (PoC)

Dnss Domain Name Search Software - Name Denial of Service PoC Exploit Title: Dnss Domain Name Search Software - 'Name' Denial of Service PoC Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software :...