16 matches found
weevely3
Weevely - 武器化 Web Shell 描述 Weevely 是一款专为后渗透利用设计的 Web Shell，可在运行时通过网络进行扩展。 将 weevely PHP agent 上传到目标 Web 服务器，即可获取其远程 shell 访问权限。它拥有 30 多个模块，可辅助完成管理任务、维持访问权限、提供态势感知、提升权限，并扩散到目标网络中。 请阅读 安装 页面，安装 weevely 及其依赖项。 请阅读 快速开始 页面，生成 agent 并连接到它。 浏览 Wiki，查看示例和使用案例。 使用方法 root@kitploit: weevely generate weevel...
Cisco AppDynamics PHP Agent Privilege Escalation (cisco-sa-appd-php-authpriv-gEBwTvu5)
According to its self-reported version, Cisco AppDynamics is affected by a vulnerability. - A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient...
EUVD-2020-18175
Malware in sbrugna...
EUVD-2023-24453
Malicious code in bioql PyPI...
CVE-2023-20274
A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...
CVE-2020-25490
Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine...
CVE-2023-20274
A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...
CVE-2023-20274
A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...
Design/Logic Flaw
A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...
CVE-2023-20274
A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...
CVE-2023-20274
A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...
CVE-2023-20274
CVE-2023-20274 affects Cisco AppDynamics PHP Agent. The issue arises from insufficient permissions set by the PHP Agent Installer on the install directory, enabling a locally authenticated attacker to modify installer-owned objects and execute with PHP privileges, potentially elevating to root on...
CVE-2020-25490
Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine...
Design/Logic Flaw
Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine...
CVE-2020-25490
CVE-2020-25490 pertains to the Sqreen PHP agent daemon prior to version 1.16.0, where lack of cryptographic signature verification enables remote attackers to inject rules for execution inside the virtual machine. Affected software: Sqreen PHP agent daemon (versions