4712 matches found
wsh
wsh wsh pronunciado woosh es un generador de webshells e interfaz de línea de comandos. Esto comenzó como un simple cliente http, ya que interactuar con webshells es tedioso. Hay un formulario, para enviar un comando tienes que escribir en una caja de entrada y presionar un botón. Quería algo que...
Mr.SIP
SIP Security, Attack and Audit Framework Mr.SIP is...
webshell-analyzer
Web Shell Analyzer Web shell analyzer is a cross platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is the bigger brother to the web shell scanner project...
webshell-analyzer
Web Shell Analyzer Web shell analyzer es un binario independiente multiplataforma construido exclusivamente para identificar, decodificar y etiquetar archivos sospechosos de ser web shells. Web shell analyzer es el hermano mayor del proyecto web shell scanner...
PHP-Shell-Detector
Detector de Web Shells Web Shell Detector – es un script PHP que te ayuda a encontrar e identificar shells php/cgiperl/asp/aspx. Web Shell Detector cuenta con una base de datos de firmas de "web shells" que permite identificar "web shell" hasta en un 99%. Gracias al uso de las últimas tecnologías...
CVE-2022-32988
CVE-2022-32988 Productos afectados Aún no hemos probado modelos de Asus distintos de los enumerados. Sin embargo, sospechamos que también podría funcionar en otros modelos con la misma versión de firmware. root@kitploit: DSL-N14UB1 V.1.1.2.3805 Descripción general En el router Asus DSL-N14U-B1...
cve-2020-0688
cve-2020-0688 I made this script for conducting CVE-2020-0688 more rapidly. It helps to improve checking the vuln, reducing hugely steps for that. Modify these inputs before running the file. url = "https://mail.something.com" input 1 command = "cmd /c echo OOOPS!!! c:/truongtn.txt" input2...
webshell
webshell | English | Türkiye Este es un proyecto de recopilación de webshells. Quien da una rosa se queda con el aroma en la mano; si descargan este proyecto, por favor, envíen también shells. Este proyecto incluye varios scripts de uso común. como: asp, aspx, php, jsp, pl, py Si envían webshells...
CVE-2019-25765
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
EUVD-2019-20201
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
CVE-2019-25765 ASP-CMS SQL Injection via commentList.asp id Parameter
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
CVE-2019-25765
CVE-2019-25765 describes a SQL injection in the ASP-CMS commentList.asp endpoint. The vulnerability arises from unsafely handling the id parameter in GET requests, enabling unauthenticated remote attackers to inject arbitrary SQL. Attackers can bypass the keyword blocklist by interleaving the str...
CVE-2019-25765 ASP-CMS SQL Injection via commentList.asp id Parameter
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
CVE-2019-25765
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
VulnCheck KEV: CVE-2019-25765
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
PT-2026-71707
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
EUVD-2025-210669
TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated attacker can directly access protected functionality through the /index.asp endpoint without providing valid credentials. This allows the...
BIT-DOTNET-2026-56170 ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
BIT-DOTNET-SDK-2026-47300 ASP.NET Core Elevation of Privilege Vulnerability
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...