ExecuteAssembly - Load/Inject .NET Assemblies

ExecuteAssembly is an alternative of CS execute-assembly, built with C/C++ and it can be used to Load/Inject .NET assemblies by; reusing the host spawnto process loaded CLR Modules/AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI,...

PT-2021-5470

Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to insufficient protection of web pages in the software of WISE-4060 and Adam-6050 D web server Ethernet modules. This could allow a remote attacker to...

Linux-Chrome-Recon - An Information Gathering Tool Used To Enumerate All Possible Data About An User From Google-Chrome Browser From Any Linux Distribution

"linux-chrome-recon" is a Information gathering tool used to enumerate all possible data about an user from Google-Chrome browser from any Linux distribution Intro 1.Loots possible data from Google-Chrome 2.Launches HTTP Server on /tmp directory Usefull 3.Simple script to receive data from...

[SECURITY] Fedora 33 Update: tcmu-runner-1.5.2-7.fc33

A daemon that handles the complexity of the LIO kernel target's userspace passthrough interface TCMU. It presents a C plugin API for extension modu les that handle SCSI requests in ways not possible or suitable to be handled by LIO's in-kernel backstores...

PT-2021-20133

Name of the Vulnerable Software and Affected Versions Wikindx versions prior to 5.7.0 Wikindx versions 6.x through 6.4.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the message parameter to "index.php?action=initLogon" or...

Arbitrium-RAT - A Cross-Platform, Fully Undetectable Remote Access Trojan, To Control Android, Windows And Linux

Arbitrium is a cross-platform is a remote access trojan RAT, Fully UnDetectable FUD, It allows you to control Android, Windows and Linux and doesn't require any firewall exceptions or port forwarding. It gives access to the local networks, you can use the targets as a HTTP proxy and access Router...

CVE-2021-3291

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

DEBIAN-CVE-2021-3115

Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo for example, cgo can execute a gcc program from an untrusted download...

CVE-2021-3291

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

CVE-2021-3115

Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo for example, cgo can execute a gcc program from an untrusted download...

CVE-2021-3291

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

PT-2021-19973

Name of the Vulnerable Software and Affected Versions Zen Cart version 1.5.7b Description The issue allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command. Recommendations For Zen Cart version 1.5.7b, as a...

CVE-2021-3291: Improper Neutralization of Special Elements used in an OS Command

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command...

openSUSE Security Update : rpmlint (openSUSE-2021-45)

This update for rpmlint fixes the following issues : - Whitelist PAM modules and DBUS rules for cockpit bsc1169614 This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

hackingtool

This repository is an offensive tool for a comprehensive hacking toolkit. The primary vulnerability class targeted is not explicitly stated, but the tool includes various modules for exploitation, reverse engineering, and post-exploitation. The probable entry points for this tool are scripts and...

zencart_auth_rce_poc

zencartauthrcepoc CVE-2021-3291 1- login as admin 2- g...

USN-4689-4 linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.4, linux-hwe-5.8, linux-oracle update

USN-4689-3 fixed vulnerabilities in the NVIDIA server graphics drivers. This update provides the corresponding updates for the NVIDIA Linux DKMS kernel modules. Original advisory details: It was discovered that the NVIDIA GPU display driver for the Linux kernel contained a vulnerability that...

PT-2021-5471

Name of the Vulnerable Software and Affected Versions WISE-4060, Adam-6050 D, Adam.NET Utilit affected versions not specified Description The issue is related to weak password requirements in the software of Ethernet modules. This can be exploited by a remote attacker using a brute force attack t...

PT-2021-11826

Name of the Vulnerable Software and Affected Versions: Sound Research DCHU model software component modules APO versions 2.0.9.17 and earlier Description: The issue allows escalation of privilege via a fake DLL. Recommendations: For versions 2.0.9.17 and earlier, update to 2.0.9.18 or later via...

PT-2021-27430

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the macho parse file 32 be function, which is called by...