539 matches found
Exploit for OS Command Injection in Paloaltonetworks Expedition
CVE-2024-9464: Palo Alto Expedition Authenticated Command Inje...
Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk
CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential...
Exploit for OS Command Injection in Ivanti Cloud_Services_Appliance
CVE-2024-8190: Ivanti Cloud Service Appliance Authenticated Co...
Exploit for Deserialization of Untrusted Data in Ivanti Endpoint_Manager
CVE-2024-29847 PoC for Ivanti Endpoint Manager AgentPortal Des...
SQL Injection Vulnerability in Integrated Academic Affairs Management System of Hunan Qiangzhi Technology Development Co. Ltd (CNVD-2024-41212)
Hunan Qiangzhi Technology Development Co., Ltd. is an education informatization service provider. A SQL injection vulnerability exists in the Integrated Academic Affairs Management System IAMS of Hunan Qiangzhi Technology Development Company Limited, which can be exploited by attackers to obtain...
Exploit for Improper Input Validation in Ivanti Endpoint_Manager
CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM...
Exploit for Deserialization of Untrusted Data in Ivanti Endpoint_Manager
CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM...
Exploit for SQL Injection in Progress Whatsup_Gold
CVE-2024-6670 PoC for Progress Software WhatsUp Gold HasErrors...
SIM Wisuda 1.0 Insecure Direct Object Reference
==================================================================================================================================== | Title : SIM Wisuda v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor :...
Exploit for Improper Privilege Management in Progress Whatsup_Gold
CVE-2024-5009 PoC for Progress WhatsUp Gold SetAdminPassword P...
Exploit for Path Traversal in Progress Whatsup_Gold
CVE-2024-4885 PoC for CVE-2024-4885 Progress WhatsUp Gold GetF...
Hfinger - Fingerprinting HTTP Requests
Tool for Fingerprinting HTTP requests of malware. Based on Tshark and written in Python3. Working prototype stage :- Its main objective is to provide unique representations fingerprints of malware requests, which help in their identification. Unique means here that each fingerprint should be seen...
Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale
Cybersecurity researchers have shed more light on a Chinese actor codenamed SecShow that has been observed conducting Domain Name System DNS on a global scale since at least June 2023. The adversary, according to Infoblox security researchers Dr. Renée Burton and Dave Mitchell, operates from the...
Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024
CVE-2024-4358 / CVE-2024-1800 Telerik Report Server deserializ...
Exploit for Authentication Bypass by Spoofing in Telerik Report_Server_2024
CVE-2024-4358 / CVE-2024-1800 Telerik Report Server deserializ...
Exploit for OS Command Injection in Fortinet Fortisiem
CVE-2024-23108 POC Proof of concept exploit to blindly execut...
Vger - An Interactive CLI Application For Interacting With Authenticated Jupyter Instances
V'ger is an interactive command-line application for post-exploitation of authenticated Jupyter instances with a focus on AI/ML security operations. User Stories As a Red Teamer , you've found Jupyter credentials, but don't know what you can do with them. V'ger is organized in a format that shoul...
Exploit for OS Command Injection in Fortinet Fortisiem
CVE-2024-23108: Fortinet FortiSIEM Unauthenticated 2nd Order C...