CVE-2017-14263

HoneywellNVRvul CVE-2017-14263 xfuturesec Co., Ltd First, obtain the SessionID for a guest user. We can find the SessionID from any http request. Such as: POST https://192.168.1.104/RPC2 HTTP/1.1 Accept: text/javascript, text/html, application/xml, text/xml X-Requested-With: XMLHttpRequest...

CVE-2026-46608: Permissive List of Allowed Inputs

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances XML-RPC server glances -s introduced a configurable CORS origin list in version 4.5.3 as a mitigation for CVE-2026-33533. However, the implementation silently falls back to Access-Control-Allow-Origin:...

EUVD-2020-3816

Malware in sbrugna...

Malicious code in amqplib-rpc2 (npm)

The package amqplib-rpc2 was found to contain malicious code...

MAL-2025-14464 Malicious code in amqplib-rpc2 (npm)

The package amqplib-rpc2 was found to contain malicious code...

CGA-6J7J-9RR2-RPC2

Bulletin has no description...

JetBrains TeamCity 2023.05.3 Remote Code Execution

Exploit Title: JetBrains TeamCity 2023.05.3 - Remote Code Execution RCE - Shodan Dork: http.title:TeamCity , http.favicon.hash:-1944119648 - Exploit Author: ByteHunter - Vendor: JetBrains - Email: [email protected] - vendor: JetBrains - Version: versions before 2023.05.4 - Tested on:...

JetBrains TeamCity Unauthenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'JetBrains TeamCity Unauthenticated Remote Code Execution', 'Description' = %q This module exploits an authentication bypass vulnerability to...

Design/Logic Flaw

An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS state of the management interface when sending an XML Entity Expansion XEE payload to the XMLRPC based RPC2 interface. The...

CVE-2020-11462: Improper Restriction of Recursive Entity References in DTDs

An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS state of the management interface when sending an XML Entity Expansion XEE payload to the XMLRPC based RPC2 interface. The...

CVE-2017-14263

Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session ID, and then sending that session ID in a userManager.addUser request to the /RPC2 URI. The attacker can login to the device with that new user...

CVE-2017-14263

Summary of CVE-2017-14263 Affected product: Honeywell NVR devices (network video recorder). Vulnerability details: Remote attackers can create a user account in the admin group by abusing access to a guest account to obtain a session ID, then sending that session ID in a userManager.addUser reque...

MS Windows (RPC2) Universal Exploit & DoS (RPC3) (MS03-039)

No description provided by source...

MS Windows (DCOM RPC2) Universal Shellcode

No description provided by source. ; Segment type: Pure code ;seg000 segment byte public 'CODE' use32 ; assume cs:seg000 ; assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing .386 assume cs:seg000 var29C = byte ptr -29Ch var28C = byte ptr -28Ch var25F = byte ptr -25Fh var254 = dword...

Microsoft Windows - RPC2 Universal Denial of Service (RPC3) (MS03-039)

Microsoft Windows - RPC2 Universal Denial of Service RPC3 MS03-039 / Windows RPC2 Universal Exploit MS03-039 & Remote DoS RPC3 / / Must be used with the associated shell / / / / This exploit works against unpatched systems MS03-039 / / And cause a Denial of Service on patched systems rpc3 / inclu...

Microsoft Windows - 'RPC2' Universal / Denial of Service (RPC3) (MS03-039)

/ Windows RPC2 Universal Exploit MS03-039 & Remote DoS RPC3 / / Must be used with the associated shell / / / / This exploit works against unpatched systems MS03-039 / / And cause a Denial of Service on patched systems rpc3 / include include include include include include FILE fp1; unsigned char...

Microsoft Windows - DCOM RPC2 Universal Shellcode

MS Windows DCOM RPC2 Universal Shellcode. Shellcode exploit for win32 platform ; Segment type: Pure code ;seg000 segment byte public 'CODE' use32 ; assume cs:seg000 ; assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing .386 assume cs:seg000 var29C = byte ptr -29Ch var28C = byte ptr...

MS Windows (DCOM RPC2) Universal Shellcode

Exploit for win32 platform in category shellcode ========================================== MS Windows DCOM RPC2 Universal Shellcode ========================================== ; Segment type: Pure code ;seg000 segment byte public 'CODE' use32 ; assume cs:seg000 ; assume es:nothing, ss:nothing,...

MS Windows (RPC2) Universal Exploit & DoS (RPC3) (MS03-039)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows RPC2 Universal Exploit & DoS RPC3 MS03-039 =========================================================== / Windows RPC2 Universal Exploit MS03-039 & Remote DoS RPC3 / / Mu...

Coda RPC2 Denial of Serviec

,'| .-''-.....--'; / '. ..-' , ,--...--''' .--''' /' -';' ; ; ; ...--'' ...--..' .;.' fL ,....----''' ,..--'' felinemenace.org Program: Coda 6.0.1 and probably below Impact: Denial of service of all programs using RPC2 Discovered: Andrew Griffiths 1 Background Coda is an advanced network filesyst...