IIS-Backdoor

IIS-Backdoor In this article I will explain how I designed a rootkit for Microsoft Internet Information Services IIS.The question is: why a backdoor in a web server? First obvious but useless answer: because we can. Ok, let us give a more clever answer. The purpose of backdooring a web sever is...

CVE-1999-0412

In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension...

Rockwell Automation FactoryTalk View SE HMI Library Disclosure

The vulnerability of the hmiisapi.dll library in the Rockwell Automation FactoryTalk View SE HMI software is related to insufficient protection of operational data during the processing of the GetHMIProjectPaths parameter. Exploiting this vulnerability can allow an attacker to disclose sensitive...

EUVD-2008-3683

Malware in sbrugna...

EUVD-1999-0842

Malware in sbrugna...

EUVD-2000-1132

Malware in sbrugna...

EUVD-2000-0822

Malware in sbrugna...

EUVD-2003-0327

Malware in sbrugna...

EUVD-2002-1666

Malware in sbrugna...

EUVD-2003-0693

Malware in sbrugna...

EUVD-2002-1294

Malware in sbrugna...

EUVD-2015-4431

Malware in sbrugna...

EUVD-2002-1293

Malware in sbrugna...

EUVD-2010-5103

Malware in sbrugna...

EUVD-2006-1398

Malware in sbrugna...

CVE-2025-45851: Undefined Security Weakness

An issue in Hikvision DS-2CD1321-I V5.7.21 build 230819 allows attackers to cause a Denial of Service DoS via sending a crafted POST request to the endpoint /ISAPI/Security/challenge. The vendor has stated that upgrading to V5.7.23SP2 fixes the issue...

CVE-2020-7057

Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login attempts depending on whether the user account exists, which might make it easier to enumerate users. However, only about 4 or 5 failed logins are...

CVE-2010-5144

The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an...

CVE-2024-46544 Apache Tomcat Connectors: mod_jk: local users can view and modify configuration

Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing modjk configuration which may lead to information disclosure and/or denial of service. This issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49...

Apache mod_isapi Dangling Pointer

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache modisapi Dangling Pointer', 'Description' = %q This module triggers a use-after-free vulnerability in the Apache Software Foundation...