15795 matches found
Apache Log4Shell RCE detection via callback correlation (Direct Check DNS)
Binary data apachelog4shelldns.nbin...
Apache Log4Shell RCE detection via callback correlation (Direct Check SNMP)
Binary data apachelog4shellsnmp.nbin...
Apache Log4Shell RCE detection via callback correlation (Direct Check NTP)
Binary data log4jlog4shellntp.nbin...
Apache Tika 2.x < 2.2.0 Log4j RCE Vulnerability (Log4Shell)
Apache Tika is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Critical Apache HTTPD Server Bugs Could Lead to RCE, DoS
Don’t duck at the latest mention of Apache: Two critical bugs in its HTTP web server – HTTPD – need to be patched pronto, lest they lead to attackers triggering denial of service DoS or bypassing your security policies. Apache, the open-source software foundation behind the Log4J logging library...
Kubernetes: Broken Domain Link Takeover from kubernetes.io docs
Report Submission Form Summary: Kubernetes docs have Spanish translation available. One of the pages of the Portuguese doc has an external reference to a website . The website is not registered and can be purchased and used to host malicious content. Kubernetes Version: NA Component Version: NA...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4ShellCVE-2021-44228 Demo !demo-scenariosimages/demo-...
phpKF CMS 3.00 Beta y6 Remote Code Execution
Exploit Title: phpKF CMS 3.00 Beta y6 - Remote Code Execution RCE Unauthenticated Date: 18/12/2021 Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://www.phpkf.com/ Software Link: https://www.phpkf.com/indirme.php Version: 3.00 Category: Webapps Tested on: Linux/Windows phpKF-CMS; It...
Apache Log4Shell RCE detection via callback correlation (Direct Check SMB)
Binary data log4jlog4shellsmb.nbin...
CVE-2021-43439
CVE-2021-43439 : RCE in the Add Review Function of iResturant 1.0 allows a remote attacker to execute commands. The NVD entry lists CVSSv3.1 base score 9.8 (CRITICAL) with network access, no user interaction, and high confidentiality/integrity/availability impact. Connected documents provide cont...
CVE-2021-43439: Improper Neutralization of Input During Web Page Generation
RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely...
CVE-2021-44159: Unrestricted Upload of File with Dangerous Type
4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack...
Apache Log4Shell RCE detection via callback correlation (Direct Check NetBIOS)
Binary data apachelog4shellnetbios.nbin...
Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Active Check
Apache JSPWiki is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Version Check
Apache JSPWiki is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
WordPress Popular Posts 5.3.2 Remote Code Execution Exploit
This exploit requires Metasploit to have a FQDN and the ability to run a payload web server on port 80, 443, or 8080. The FQDN must also not resolve to a reserved address 192/172/127/10. The server must also respond to a HEAD request for the payload, prior to getting a GET request. This exploit...
RubyGems: Dependency repository hijacking aka Repo Jacking from GitHub repo rubygems/bundler-site & rubygems/bundler.github.io + bundler.io docs
Dependency repository hijacking aka repo jacking is an obscure supply chain vulnerability, conceptually similar to subdomain takeover. When the linked repository owner changes their username, it becomes immediately available to be re-registered by anyone. This means that any project that linked...
Security Bulletin: Log4j as used in IBM® Disconnected Log Collector is vulnerable to remote code execution (RCE) (CVE-2021-44228)
Summary Log4j is used by IBM® Disconnected Log Collector to log system events. This bulletin provides a remediation for the vulnerability, CVE-2021-44228 by upgrading IBM® Disconnected Log Collector and thus addressing the exposure to the log4j vulnerability. Vulnerability Details CVEID:...
Brand-New Log4Shell Attack Vector Threatens Local Hosts
Defenders will once again be busy beavers this weekend: There’s an alternative attack vector for the ubiquitous Log4j vulnerability, which relies on a basic Javascript WebSocket connection to trigger remote code-execution RCE on servers locally, via drive-by compromise. In other words, an exploit...