182 matches found
backcookie
backcookie 쿠키를 이용한 작은 백도어. ========== Example one: python backcookie.py -u http://target.com/shell.php -c namecookie Example two: python backcookie.py --url http://target.com/shell.php --cookie namecookie 사용자 정의 명령binfo, 객관적인 정보를 얻을 수 있습니다. @pwned:$ binfo 사용자 정의 명령exit, 종료하려면. @pwned:$ exit 삽입됨 -...
TendaSpill
TendaSpill CVE-2015-5995를 사용하여 비밀번호를 추출하는 익스플로잇 도구입니다. CVE-2015-5995 펌웨어 5.07.50을 실행하는 Mediabridge Medialink MWN-WAPR300N 장치와 Tenda N3 Wireless N150 장치는 HTTP Cookie 헤더의 특정 admin 하위 문자열을 통해 원격 공격자가 관리자 액세스 권한을 얻을 수 있도록 합니다. 면책 조항 이 도구는 테스트 및 교육 목적으로만 제공됩니다. 이 코드의 다른 용도는 허용되지 않습니다. 사용에 따른 위험은 사용자...
CVE-2026-18607 Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow
A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation o...
CVE-2026-18607 Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow
A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation o...
CVE-2026-18607
The CVE-2026-18607 affects Wavlink devices including WN572, WN570H, WN573, WN529, WN530, WN531, WN535, WN536, WN551, WN557, and NU516 (firmware up to 20260609). The vulnerability targets the strcpy function in lighttpd’s file upload.cgi, where manipulating the HTTP_COOKIE argument triggers a stac...
USN-8018-3: Python 2.7 vulnerabilities
USN-8018-1 fixed CVE-2025-12084, CVE-2025-15282, CVE-2026-0672, CVE-2026-0865 for python3. This update provides the corresponding updates for python2.7. Original advisory details: Denis Ledoux discovered that Python incorrectly parsed email message headers. An attacker could possibly use this iss...
OPENSUSE-SU-2026:10349-1 ruby4.0-rubygem-http-cookie-1.0.8-1.3 on GA media
These are all security issues fixed in the ruby4.0-rubygem-http-cookie-1.0.8-1.3 package on the GA media of openSUSE Tumbleweed...
USN-8018-1 python3.14, python3.13, python3.12, python3.11, python3.10, python3.9, python3.8, python3.7, python3.6, python3.5, python3.4 vulnerabilities
Denis Ledoux discovered that Python incorrectly parsed email message headers. An attacker could possibly use this issue to inject arbitrary headers into email messages. This issue only affected python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12, python3.13, and...
CVE-2019-11668
HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. And Micro Focus Service Manager Chat Server, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. And Micro Focus Service Manager Chat Service 9.41, 9.50, 9.51,...
CVE-2019-25278: Cleartext Transmission of Sensitive Information
FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. Attackers can perform man-in-the-middle attacks to capture HTTP cookie authentication information during network communication...
Amazon Linux 2023 : oci-add-hooks (ALAS2023-2025-1273)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1273 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL...
EUVD-2017-17965
Malware in sbrugna...
EUVD-2006-1828
Malware in sbrugna...
EUVD-2019-3338
Malware in sbrugna...
EUVD-2016-3028
Malware in sbrugna...
EUVD-2002-1139
Malware in sbrugna...
EUVD-2019-5527
Malware in sbrugna...
EUVD-2015-3465
Malware in sbrugna...