17101 matches found
DLL Hijacking Vulnerability in Flush Stakeout
Flush Stare is an investment assistant software. Flush Stakeout has a DLL hijacking vulnerability that can be exploited by attackers to execute malicious DLL files...
DLL Hijacking Vulnerability in IceAssistant PC Version
Ice Assistant is a professional Apple cell phone management assistant. There is a DLL hijacking vulnerability in IceAssistant PC version, which can be exploited by attackers to execute malicious DLL files...
DLL Hijacking Vulnerability in Big Wisdom 365 PC Version
Dawei 365 is a software for investors focused on the A-share market. A DLL hijacking vulnerability exists in Dawei 365 for PC, which can be exploited by attackers to execute malicious DLL files...
37 online game box has DLL hijacking vulnerability
37 Game Box is a free auxiliary tool for page games. 37 Online Game Box has a DLL hijacking vulnerability that can be exploited by attackers to execute malicious code...
The vulnerability of the DHCP protocol for real-time operating systems like Wind River VxWorks allows a perpetrator to execute arbitrary code.
The vulnerability of the DHCP protocol for real-time operating systems like Wind River VxWorks is related to a potential overflow during the parsing of DHCP/DACK messages within the ipdhcpc process. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted...
Ninja - Open Source C2 Server Created For Stealth Red Team Operations
Ninja C2 is an Open source C2 server created by Purple Team to do stealthy computer and Active directoty enumeration without being detected by SIEM and AVs , Ninja still in beta version and when the stable version released it will contains many more stealthy techinques and anti-forensic to create...
jetty: full server path revealed when using the default Error Handling
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...
CVE-2020-7260
DLL Side Loading vulnerability in the installer for McAfee Application and Change Control MACC prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder...
CVE-2020-1957
Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...
CVE-2020-1957
Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...
DEBIAN-CVE-2020-1957
Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...
Authentication flaw
Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...
UBUNTU-CVE-2020-1957
Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...
CVE-2020-1957
Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...
CVE-2020-1957
Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...
Code injection
UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software attempts to see if there are updates...
CVE-2020-6650 Arbitrary code execution through “Update Manager” Class
UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software attempts to see if there are updates...
PT-2020-10038 · Zoho +1 · Zoho Manageengine Assetexplorer +1
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Asset Explorer version 6.5 Description: The issue arises from the lack of validation of the System Center Configuration Manager SCCM database username when dynamically generating a command to schedule scans for SCCM. This...
Windows/x64 - WinExec Add-Admin Dynamic Null-Free Shellcode (210 Bytes)
210 bytes small WinExec add-admin dynamic null-free shellcode. // Shellcode Title: WinExec Add-Admin Dynamic Null-Free Shellcode 210 Bytes // Shellcode Author: Bobby Cooke // Date: March 21st, 2020 // Tested on: Windows 10 Home - 1909 x8664, Windows 10 Pro - 1909 x86 // Description: Windows...
PT-2020-19976 · Nextcloud · Nextcloud Desktop Client
Name of the Vulnerable Software and Affected Versions: Nextcloud Desktop Client version 2.6.2 Description: A code injection issue allows loading arbitrary code when starting the client with DYLD INSERT LIBRARIES set in the environment. Recommendations: For Nextcloud Desktop Client version 2.6.2, ...