Arbitrary Code Execution

datomic-free is vulnerable to Arbitrary Code Execution. It allows an authorized user to inject arbitrary java code using the H2 SQL ALIAS command CREATE ALIAS...

sudo-snooper - Python script to fool sudo users

sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge. Installation steps...

CVE-2001-0301

Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large strings...