2 matches found
CVE-2020-8284
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service...
4.3CVSS6.4AI score0.03851EPSS
SaveExploits0
Windows Inject DLL, Reverse TCP Stager (No NX or Win7)
Inject a custom DLL into the exploited process. Connect back to the attacker No NX This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 177 include Msf::Payload::Stager include...
0.6AI score
SaveExploits0
20