362 matches found
OESA-2023-1779 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open, aka a race...
OESA-2023-1781 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open, aka a race...
Exploit for Out-of-bounds Write in Haxx Libcurl
PoC exploit for CVE-2023-38545, a heap buffer overflow vulnerabi...
ThinManager Path Traversal (CVE-2023-2917) Arbitrary File Upload
This module exploits a path traversal vulnerability CVE-2023-2917 in ThinManager use auxiliary/admin/networking/thinmanager/traversalupload2 msf undefinedtraversalupload2 show actions ...actions... msf undefinedtraversalupload2 set ACTION msf undefinedtraversalupload2 show options ...show and set...
CVE-2023-29017
creationtimestamp| type| source ---|---|--- 2023-04-06 19:00:37+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-7jxr-cg7f-gpgv 2023-04-07 00:27:36+00:00| seen| https://t.me/cibsecurity/61617 2023-04-08 13:06:59+00:00| published-proof-of-concept|...
Nextcloud Workflows Remote Code Execution
This module adds workflows as an authenticated user which can only be created by administrators by design. If the app "Nextcloud Workflow Script" is installed it is possible to generate a workflow that executes commands. Module Options msf use exploit/unix/webapp/nextcloud/workflowsrce msf...
Exploit for Missing Authentication for Critical Function in Linuxfoundation Harbor
CVE-2022-46463 Harbor public镜像下载 Harbor是一款开源的镜像托管平台。 此脚本通过...
OESA-2023-1053 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In bindervmaclose of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
Exploit for Unrestricted Upload of File with Dangerous Type in Nosh_Chartingsystem_Project Nosh_Chartingsystem
CVE-2023-24610 This is a proof of concept for CVE-2023-24610...
PT-2022-24602 · D Link · D-Link Dap-3662 +8
Name of the Vulnerable Software and Affected Versions: D-Link DAP-2310 versions 2.10rc036 and earlier D-Link DAP-2330 versions 1.06rc020 and earlier D-Link DAP-2360 versions 2.10rc050 and earlier D-Link DAP-2553 versions 3.10rc031 and earlier D-Link DAP-2660 versions 1.15rc093 and earlier D-Link...
PT-2022-20237 · Siemens · Simatic Et 200Pro Im154-8F Pn/Dp Cpu +21
Name of the Vulnerable Software and Affected Versions: SIMATIC Drive Controller family versions prior to V3.2.19 SIMATIC ET 200S IM151-8 PN/DP CPU versions prior to V3.2.19 SIMATIC ET 200S IM151-8F PN/DP CPU versions prior to V3.2.19 SIMATIC ET 200pro IM154-8 PN/DP CPU versions prior to V3.2.19...
PT-2022-6272 · Moxa +1 · Moxa Uc-8100 Series +9
Name of the Vulnerable Software and Affected Versions: Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior Moxa UC-8580 Series version 1.1 Moxa UC-8540 Series versions 1.0 through 1.2 Moxa UC-8410A Series version 2.2 Moxa UC-8200 Series versions 1.0 through 2.4 Moxa UC-8100A-ME-T Series...
Exploit for OS Command Injection in Cacti
CVE-2020-8813 - RCE through grap...
PT-2022-23028 · Unknown · Rust-Websocket
Content removed...
Exploit for CVE-2022-30190
POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina...
OESA-2022-1621 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local...
Exploit for CVE-2022-21449
Datadog Security Labs Research and Proof of Concept Code === Th...
PT-2022-11535 · Siemens · Ruggedcom Rs1600T +50
Name of the Vulnerable Software and Affected Versions: RUGGEDCOM i800 RUGGEDCOM i800NC RUGGEDCOM i801 RUGGEDCOM i801NC RUGGEDCOM i802 RUGGEDCOM i802NC RUGGEDCOM i803 RUGGEDCOM i803NC RUGGEDCOM M2100 RUGGEDCOM M2100NC RUGGEDCOM M2200 RUGGEDCOM M2200NC RUGGEDCOM M969 RUGGEDCOM M969NC RUGGEDCOM RMC3...