Lucene search
+L

36 matches found

Kitploit
Kitploit
•added 2026/09/25 6:43 p.m.•11 views

ShuckNT

🔐 ShuckNT : Shuck hash before trying to crack it | Shuck.sh's script ShuckNT is the script of Shuck.sh online service for on-premise use try it online!. It is design to dowgrade, convert, dissect and shuck authentication token based on Data Encryption Standard DES. Algorithms / formats supported ...

6.1AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/04/20 9:30 a.m.•22 views

EUVD-2026-23784

A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrative user to break out of the restricted web environment and execute arbitrary code on the underlying operating system. This occurs due to insufficient validation of user-supplied...

9.4CVSS6.2AI score0.0208EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/04/20 6:54 a.m.•19 views

CVE-2026-6644 A command injection vulnerability was found in the PPTP VPN Clients on the ADM

A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrative user to break out of the restricted web environment and execute arbitrary code on the underlying operating system. This occurs due to insufficient validation of user-supplied...

9.4CVSS6.2AI score0.0208EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/20 12:00 a.m.•3 views

CVE-2026-6644: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrative user to break out of the restricted web environment and execute arbitrary code on the underlying operating system. This occurs due to insufficient validation of user-supplied...

9.4CVSS6.5AI score0.0208EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-16170

Malware in sbrugna...

7.5CVSS7.5AI score0.01766EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2008-1619

Malware in sbrugna...

5CVSS6.4AI score0.01738EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2019-6271

Malware in sbrugna...

8.6CVSS8.7AI score0.01374EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2008-4210

Malware in sbrugna...

7.5CVSS6.4AI score0.01636EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-31487

Malicious code in bioql PyPI...

8.6CVSS8.4AI score0.00222EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-46466

Malicious code in bioql PyPI...

7.5CVSS7.7AI score0.0071EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/29 12:32 a.m.•44 views

CVE-2025-11130 iHongRen pptp-vpn XPC Service HelperTool.m shouldAcceptNewConnection missing authentication

A weakness has been identified in iHongRen pptp-vpn 1.0/1.0.1 on macOS. This issue affects the function shouldAcceptNewConnection of the file HelpTool/HelperTool.m of the component XPC Service. This manipulation causes missing authentication. The attack can only be executed locally. The exploit h...

8.6CVSS0.00222EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/09/29 12:00 a.m.•25 views

PT-2025-39798

Name of the Vulnerable Software and Affected Versions iHongRen pptp-vpn versions 1.0 and 1.0.1 Description A security issue has been identified in iHongRen pptp-vpn on macOS. The problem resides in the shouldAcceptNewConnection function within the HelpTool/HelperTool.m file of the XPC Service...

8.6CVSS8.1AI score0.00222EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/29 12:00 a.m.•3 views

CVE-2025-11130: Missing Authentication for Critical Function

A weakness has been identified in iHongRen pptp-vpn 1.0/1.0.1 on macOS. This issue affects the function shouldAcceptNewConnection of the file HelpTool/HelperTool.m of the component XPC Service. This manipulation causes missing authentication. The attack can only be executed locally. The exploit h...

8.6CVSS5.1AI score0.00222EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:14 a.m.•19 views

CVE-2019-6611

When BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 are processing certain rare data sequences occurring in PPTP VPN traffic, the BIG-IP system may execute incorrect logic. The TMM may restart and produce a core file as a result of this condition. The...

7.5CVSS7AI score0.01766EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/23 10:15 p.m.•40 views

CVE-2024-5227

TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability...

7.5CVSS8AI score0.0071EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/23 9:55 p.m.•41 views

CVE-2024-5227 TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability

TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability...

7.5CVSS8AI score0.0071EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/23 9:55 p.m.•14 views

CVE-2024-5227 TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability

TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability...

7.5CVSS8AI score0.0071EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/23 9:55 p.m.•110 views

CVE-2024-5227

TP-Link Omada ER605 PPTP VPN username Command Injection (CVE-2024-5227) allows network-adjacent attackers to execute arbitrary code as root by abusing an unsafe username parameter in /usr/bin/pppd. Impact is remote code execution with root privileges if PPTP VPN with LDAP authentication is enable...

7.5CVSS8AI score0.0071EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/23 12:00 a.m.•0 views

CVE-2024-5227: Improper Neutralization of Special Elements used in an OS Command

TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability...

7.5CVSS6.7AI score0.0071EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/23 12:00 a.m.•36 views

(Pwn2Own) TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices are only vulnerable if configured to use a PPTP VPN with LDAP authentication. The...

7.5CVSS7.5AI score0.0071EPSS
SaveExploits0References1
Rows per page
Query Builder