3 matches found
CVE-2020-14144-GiTea-git-hooks-rce
CVE-2020-14144 - GiTea 认证远程代码执行(RCE) 一个利用 CVE-2020-14144(GiTea 认证远程代码执行)的脚本,通过 Git 钩子实现攻击 功能特性 从 IP 和端口自动生成反向 Shell 载荷 使用 -f 选项上传自定义 Shell 脚本并在远程执行 使用用户名和密码自动登录 用法 root@kitploit: $ ./CVE-2020-14144-GiTea-git-hooks-rce.py -h / | CVE-2020-14144 | | | | | | | | | | |/ / | Authenticated Remote Code...
D-Link Cookie Command Execution
This module exploits an anonymous remote upload and code execution vulnerability on different D-Link devices. The vulnerability is a command injection in the cookie handling process of the lighttpd web server when handling specially crafted cookie values. This module has been successfully tested ...
Johnson Controls Metasys Unlimited File Upload Vulnerability
Johnson Controls Metasys is a building automation system from Johnson Controls. The system can be networked with weak electronic systems such as fire and security through a variety of open protocols or standard interfaces to provide system integrity for secure access. An unrestricted file upload...