CVE-2023-38831-RaRCE

RaRCE, Gerador de exploit para CVE-2023-38831 Este é um gerador de exploit versátil, fácil de instalar e fácil de usar, para CVE-2023-38831, uma vulnerabilidade que afeta versões do WinRAR anteriores à 6.23. O WinRAR da RARLabs anterior à versão 6.23 permite que atacantes executem código arbitrár...

RpcProxyInvoke

RpcProxyInvoke Übersicht Um eine allgemeine Möglichkeit zur Ausführung von lokalem und remote Code zu schaffen, haben wir eine relativ obskure Methode der Codeausführung entwickelt, die wir intern als RpcCraft Self und RpcExec Remote Process bezeichnen. Diese Technik nutzt eine unter...

GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC

GZDoom = 4.13.1 Beliebige Codeausführung durch bösartiges ZScript Ein Proof of Concept für eine Schwachstelle in der ZScript-Funktionalität von GZDoom https://github.com/zdoom/gzdoom, die ich entdeckt habe. Ein Angreifer kann eine PK3-Datei mit einer bösartigen ZScript-Quelldatei teilen und Zugri...

CVE-2024-31835

CVE-2024-31835 Cross-Site-Scripting-Schwachstelle in flatpress CMS Flatpress v1.3 ermöglicht einem entfernten Angreifer die Ausführung von beliebigem Code über eine präparierte Nutzlast im Dateinamen-Parameter. Betroffene Komponente: FlatPress CMS Admin-Bereich Datei-Upload-Feld Behobene Version:...

CVE-2023-43263

CVE-ID : CVE-2023-43263 Schwachstellentyp : Cross-Site Scripting Beschreibung : Eine Cross-Site Scripting XSS-Schwachstelle in Froala Editor v.4.1.1 ermöglicht es Angreifern, beliebigen Code über die Markdown-Komponente auszuführen. Schritte zur Reproduktion : Payload in der...

CVE-2023-44764_ConcreteCMS-Stored-XSS---Site_Installation

ConcreteCMS XSS Armazenado v.9.2.1 Autor: Sergio Descrição: A vulnerabilidade de Cross Site Scripting no ConcreteCMS v.9.2.1 permite que um atacante local execute código arbitrário através de um script malicioso no parâmetro SITE durante a instalação ou nas Configurações. Vetores de Ataque:...

jscythe

jscythe abusa do mecanismo de inspetor do node.js para forçar qualquer processo baseado em node.js/electron/v8 a executar código javascript arbitrário, mesmo que suas capacidades de depuração estejam desativadas. Testado e funcionando contra Visual Studio Code, Discord, qualquer aplicação Node.js...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

CVE-2023-44770_ZenarioCMS--Reflected-XSS---Organizer-Alias

ZenarioCMS Reflektiertes XSS v.9.4.59197 Autor: Sergio Beschreibung: Eine Cross Site Scripting-Schwachstelle in ZenarioCMS v.9.4.59197 ermöglicht es einem lokalen Angreifer, beliebigen Code über ein manipuliertes Skript im Organizer – Spare alias auszuführen. Angriffsvektoren: Skripten einer...

CVE-2023-44758_GDidees-CMS-Stored-XSS---Title

GDidees Gespeichertes XSS v3.0 Autor: Sergio Beschreibung: Cross Site Scripting-Schwachstelle in GDidees v.3.0 ermöglicht es einem lokalen Angreifer, beliebigen Code über ein manipuliertes Skript im Seitentitel auszuführen. Angriffsvektoren: Scripting: Eine Schwachstelle in der Bereinigung der...

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...

WAVLINK WN535 G3 - Improper Access Control

WAVLINK WN535 G3 M35G3R.V5030.180927 is susceptible to improper access control. A vulnerability in /cgi-bin/ExportAllSettings.sh allows an attacker to execute arbitrary code via a crafted POST request and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized...

XStream 1.4.18 - Arbitrary Code Execution

XStream 1.4.18 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

TOTOLINK CX-A3002RU - Remote Code Execution

An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT V2.1.8-B20171113.1408 and TOTOLINK-CX-N300RT V2.1.8-B20191010.1107 and TOTOLINK-CX-N302RE V2.0.2-B20170511.1523 allows a remote...

Swift Performance Lite < 2.3.7.2 - Local PHP File Inclusion

A vulnerability in Swift Performance Lite before version 2.3.7.2 allows unauthenticated attackers to perform local PHP file inclusion via the 'ajaxify' parameter. This can lead to arbitrary code execution on the server. id: CVE-2024-10516 info: name: Swift Performance Lite 2.3.7.2 - Local PHP Fil...

idcCMS V1.60 - Cross-Site Scripting

idcCMS V1.60 is vulnerable to reflected cross-site scripting XSS via the idName parameter in read.php. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. id: CVE-2024-11587 info: name: idcCMS V1.60 - Cross-Site Scripting author: ritikchaddha severity:...

vBulletin replaceAdTemplate - Remote Code Execution

vBulletin versions 5.0.0 through 6.0.3 contain a Remote Code Execution RCE vulnerability in the ajax/api/ad/replaceAdTemplate endpoint. This flaw arises from improper use of PHP's Reflection API, allowing unauthenticated attackers to invoke protected controller methods. By injecting a crafted...

Yii 2 < 2.0.38 - Remote Code Execution

Yii 2 yiisoft/yii2 before version 2.0.38 is vulnerable to remote code execution if the application calls unserialize on arbitrary user input. id: CVE-2020-15148 info: name: Yii 2 2.0.38 - Remote Code Execution author: pikpikcu severity: critical description: Yii 2 yiisoft/yii2 before version 2.0....

shadoweb wdja v1.5.1 - Cross-Site Scripting

shadoweb wdja v1.5.1 is susceptible to cross-site scripting because it allows attackers to execute arbitrary code and gain escalated privileges via the backurl parameter to /php/passport/index.php. id: CVE-2020-20982 info: name: shadoweb wdja v1.5.1 - Cross-Site Scripting author:...

WordPress Admin Font Editor <=1.8 - Cross-Site Scripting

WordPress Admin Font Editor 1.8 and before contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...