CVE-2017-6526: Improper Authentication

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution through an improperly protected administrative web shell cgi-bin/dna/sysAdmin.cgi POST requests...

radare2 denial of service vulnerability (CNVD-2017-02720)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'dexloadcode' function in the libr/bin/p/bindex.c file in radare2 version 1.2.1. A remote attacker can exploit this vulnerability to cause a denial of service out-of-bounds read and...

radare2 denial of service vulnerability (CNVD-2017-02721)

radare2 is an open source reverse engineering flat. A denial of service vulnerability in the dexparsedebugitem function in libr/bin/p/bindex.c in radare2 version 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted DEX file...

CVE-2016-9683: Improper Neutralization of Special Elements used in a Command

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...

PT-2017-3169

Name of the Vulnerable Software and Affected Versions SonicWall Secure Remote Access server version 8.1.0.2-14sv Description The issue is related to the viewcert CGI component in the web administrative interface, specifically the /cgi-bin/viewcert API endpoint. It is caused by a lack of input...

PT-2017-3171

Name of the Vulnerable Software and Affected Versions SonicWall Secure Remote Access server version 8.1.0.2-14sv Description The issue is related to the diagnostics component of the CGI application in the web administrative interface, specifically the /cgi-bin/diagnostics endpoint. It is caused b...

CVE-2016-9684: Improper Neutralization of Special Elements used in a Command

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI /cgi-bin/viewcert component responsible for processing SSL certificate information. The CGI...

Linux/x86 - Reverse TCP Alphanumeric Staged Shellcode (103 bytes)

Reverse TCP Staged Alphanumeric Shellcode Linux x86 Execve /bin/sh Author: Snir Levi, Applitects 103 Bytes date: 9.2.17 Automatic python shellcode handler with stage preset send will be ready soon: https://github.com/snir-levi/ReverseTCPAlphanumericStagedShellcodeExecve-bin-bash/ IP - 127.0.0.1...

Linux/x86 - Reverse TCP Alphanumeric Staged Shellcode (103 bytes)

Linux/x86 - Reverse TCP Alphanumeric Staged Shellcode 103 bytes. Shellcode exploit for Linx86 platform Reverse TCP Staged Alphanumeric Shellcode Linux x86 Execve /bin/sh Author: Snir Levi, Applitects 103 Bytes date: 9.2.17 Automatic python shellcode handler with stage preset send will be ready...

Linux - Multi/Dual mode execve("/bin/sh", NULL, 0) Shellcode (37 bytes)

Linux - Multi/Dual mode execve"/bin/sh", NULL, 0 Shellcode 37 bytes. Shellcode exploit for Linux platform / Copyright © 2017 Odzhan. All Rights Reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:...

Linux/x86 - Multi/Dual mode execve ("/bin/sh", NULL, 0) Shellcode (37 bytes)

/ Copyright © 2017 Odzhan. All Rights Reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the...

Oracle JRE/JDK: Multiple vulnerabilities

Background Java Platform, Standard Edition Java SE lets you develop and deploy Java applications on desktops and servers, as well as in today’s demanding embedded environments. Java offers the rich user interface, performance, versatility, portability, and security that today’s applications...

PT-2017-7311

Name of the Vulnerable Software and Affected Versions Icinga versions prior to 1.14 Description The issue is related to a cross-site scripting XSS vulnerability in the Classic-UI, specifically with the CSV export link and pagination feature. This allows remote attackers to inject arbitrary web...

CVE-2016-10106: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in scgi-bin/platform.cgi on NETGEAR FVS336Gv3, FVS318N, FVS318Gv2, and SRX5308 devices with firmware before 4.3.3-8 allows remote authenticated users to read arbitrary files via a .. dot dot in the thispage parameter, as demonstrated by reading the /etc/shadow fi...

unsorted bin attack analysis-vulnerability warning-the black bar safety net

One, Foreword This is before that article overflow using the FILE structure of the follow-up article, mentioned earlier is for the Shanghai network security contest pwn450 of technology to write articles, a total of two techniques, one is the overflow using the FILE structure of the body, one is...

Linux/x86 - /bin/bash -c Arbitrary Command Execution Shellcode (72 bytes)

/ ;author: Filippo "zinzloun" Bersani ;date: 16/12/2016 ;version: 1.0 ;X86 Assembly/NASM Syntax ;tested on: Linux OpenSuse001 2.6.34-12-desktop 32bit ; Linux ubuntu 3.13.0-100-generic 147precise1-Ubuntu 32bit ; Linux bb32 4.4.0-45-generic 32bit ;72 bytes ;description: executes arbitrary command...

CVE-2016-6277

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow...

PT-2016-3443

Name of the Vulnerable Software and Affected Versions NETGEAR R6250 versions 1.0.4.6.Beta and earlier NETGEAR R6400 versions 1.0.1.18.Beta and earlier NETGEAR R6700 versions 1.0.1.14.Beta and earlier NETGEAR R6900 affected versions not specified NETGEAR R7000 versions 1.0.7.6.Beta and earlier...

PT-2016-6697 · NetGear · R6400 +11

Name of the Vulnerable Software and Affected Versions: NETGEAR R6250 versions 1.0.0 through 1.0.4.6.Beta NETGEAR R6400 versions 1.0.0 through 1.0.1.18.Beta NETGEAR R6700 versions 1.0.0 through 1.0.1.14.Beta NETGEAR R6900 version 1.0.0 NETGEAR R7000 versions 1.0.0 through 1.0.7.6.Beta NETGEAR...

CVE-2016-6277: Cross-Site Request Forgery (CSRF)

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow...