CiscoExploit

This is a collection of three separate tools for exploiting vulnerabilities in Cisco devices. The tools are: 1. CiscoRV320Dump-master: This tool is designed to dump the configuration of a Cisco RV320 router. It includes a script called dumpconfig.py that extracts the configuration from the router...

Linux mlx5_fw_fatal_reporter_dump Heap Buffer Overflow DoS

The vulnerability of the “mlx5fwfatalreporterdump” function in the Linux operating system is related to an uncontrolled resource consumption resource exhaustion. Exploiting this vulnerability could allow a attacker to cause a service failure...

CVE-2020-2004

Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troubleshooting on GlobalProtect app also known as GlobalProtect Agent for MacOS and Windows. For this issue to occur all of these conditions must be true: 1 'Sav...

CVE-2020-6248

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

Code injection

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

CVE-2020-6248

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

CVE-2020-6248

CVE-2020-6248 affects SAP Adaptive Server Enterprise (Backup Server) 16.0. The issue arises because the server does not perform required validation for an authenticated user during DUMP/LOAD, enabling arbitrary code execution or code injection. Related sources describe potential database takeover...

PT-2020-19044

Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise Backup Server version 16.0 Description The issue allows arbitrary code execution or code injection due to insufficient validation checks for authenticated users when executing DUMP or LOAD commands. Recommendatio...

CVE-2020-6248: Improper Input Validation

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

Nuls Public Chain Transaction Signature Verification Vulnerability

A vulnerability in Nuls' transaction signature verification algorithm allowed an attacker to bypass signature verification using carefully constructed transactions, transferring tokens from the team's account, with some of the tokens subsequently dumped into the market...

YesWiki cercopitheque 2020.04.18.1 - 'id' SQL Injection

Exploit Title: YesWiki cercopitheque 2020.04.18.1 - 'id' SQL Injection Date: 2020-04-25 Exploit Author: coiffeur Vendor Homepage: https://yeswiki.net/ Software Link: https://yeswiki.net/, https://github.com/YesWiki/yeswiki Version: YesWiki cercopitheque OPTIONS... DESCRIPTION: -lt, list tables. -...

CVE-2020-5875

On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management Microkernel TMM may generate a core file and restart while processing SSL traffic with an HTTP/2 full proxy...

CVE-2020-5882

On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5, and 11.6.1-11.6.5.1, under certain conditions, the Intel QuickAssist Technology QAT cryptography driver may produce a Traffic Management Microkernel TMM core file...

CVE-2019-14116

Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the crash dump boot flow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

PT-2020-9531

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue allows for privilege escalation through the use of an altered debug policy image. This occurs because the XPU, which protects the debug policy regions, is...

CVE-2019-14116: Missing Authorization

Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the crash dump boot flow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

Arbitrary Code Execution

wireshark is vulnerable to arbitrary code execution. The vulnerability exists as when Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. The flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service DoS. The vulnerability exists as Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark...