CVE-2018-8934

CVE-2018-8934 covers a backdoor in the firmware of the Promontory chipset used in AMD Ryzen/Ryzen Pro platforms (aka CHIMERA-FW). The issue stems from a firmware backdoor in Promontory, with documented risk perceptions in multiple sources, and a CVSS3 score indicating CRITICAL impact across confi...

UNAUTHENTICATED START OF TELNETD ON TENDA AC15 ROUTER

INTRODUCTION We previously showed how the Tenda AC15 router was vulnerable to an unauthenticated remote code execution vulnerability via a stack based buffer overflow. Writing exploits like that can be incredibly interesting, but sometimes, all you need is a GET request to get root. In this post ...

D-Link DIR-850L Backdoor Account / Hardcoded Credentials (Telnet)

The D-Link DIR-850L router has a backdoor account with hardcoded credentials. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBM - Car Backdoor Maker

A hardware-backdoor for CAN bus - by @UnaPibaGeek & @holesec For the first time, a hardware backdoor tool is presented having several advanced features, such as: remote control via SMS commands, automated launch of attack payloads at a GPS location or when a specific car status is reached; and a...

Powershell-RAT - Python Based Backdoor That Uses Gmail To Exfiltrate Data Through Attachment

Python based backdoor that uses Gmail to exfiltrate data as an e-mail attachment. This RAT will help someone during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends the information to an attacker as an e-mail attachment. Note: This...

GrayKey iPhone unlocker poses serious security concerns

Ever since the case of the San Bernadino shooter pitted Apple against the FBI over the unlocking of an iPhone, opinions have been split on providing backdoor access to the iPhone for law enforcement. Some felt that Apple was aiding and abetting a felony by refusing to create a special version of...

Trojanized BitTorrent Software Update Hijacked 400,000 PCs Last Week

A massive malware outbreak that last week infected nearly half a million computers with cryptocurrency mining malware in just a few hours was caused by a backdoored version of popular BitTorrent client called MediaGet. Dubbed Dofoil also known as Smoke Loader, the malware was found dropping a...

CMS Made Simple 2.1.6 - Remote Code Execution

Exploit Title: CMS Made Simple 2.1.6 - Remote Code Execution Date: 2018-02-26 Exploit Author: Keerati T. Vendor Homepage: http://www.cmsmadesimple.org/ Software Link: http://s3.amazonaws.com/cmsms/downloads/13570/cmsms-2. 1.6-install.zip Version: 2.1.6 CVE: CVE-2018-7448 Tested on: Linux...

CVE-2014-3205

backupmgt/preconnectcheck.php in Seagate BlackArmor NAS contains a hard-coded password of '!@$$%FREDESWWSED' for a backdoor user...

CVE-2014-3205

The CVE-2014-3205 issue affects Seagate BlackArmor NAS in backupmgt/pre_connect_check.php, where a backdoor user is authenticated using a hard-coded password '!~@##$$%FREDESWWSED'. The vulnerability is documented across multiple sources (NVD entry, CNVD/CVE records, and CNVD Chinese advisory) and...

CVE-2014-3205

backupmgt/preconnectcheck.php in Seagate BlackArmor NAS contains a hard-coded password of '!@$$%FREDESWWSED' for a backdoor user...

Code injection

smart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator" application through 18 for Android allows attackers to access files via the backdoor 17621762 PIN...

CVE-2017-18192

smart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator" application through 18 for Android allows attackers to access files via the backdoor 17621762 PIN...

CVE-2017-18192

smart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator" application through 18 for Android allows attackers to access files via the backdoor 17621762 PIN...

CVE-2017-18192

smart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator" application through 18 for Android allows attackers to access files via the backdoor 17621762 PIN...

New IoT Botnet DoubleDoor Bypass Firewall to Drop Backdoor

By Waqas A new Internet of Things IoT botnet campaign dubbed as This is a post from HackRead.com Read the original post: New IoT Botnet DoubleDoor Bypass Firewall to Drop Backdoor...

Flaw in Telegram Windows App Used for Cryptomining & Backdoor

By Waqas Another day, another popular app compromised to drop backdoor and conduct This is a post from HackRead.com Read the original post: Flaw in Telegram Windows App Used for Cryptomining & Backdoor...

Arbitrary File Editing Vulnerability in UCMS Version 1.2

UCMS is a simple open source content management system. UCMS 1.2 version of the existence of arbitrary file editing vulnerability, the attacker can edit the non-existent script file, directly write a sentence Trojan horse, to obtain control of the web server...

TopHat - Fully undetected backdoor with RSA Encrypted shell

TopHat is a inspired by metasploits capabilties of meterpreter however i have coded a script to generate a undetected encrypted backdoor using python. Usage: python tophat.py Download TopHat...

Dahua Generation 2/3 - Backdoor Access Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/python2.7 if False: ''' 2017-05-03 Public rerelease of Dahua Backdoor PoC https://github.com/mcw0/PoC/blob/master/dahua-backdoor-PoC.py 2017-03-20 With my newfound knowledge of vulnerable devices out there with an unbelievable...