230 matches found
Enigma NMS < 65.0.0 - Authenticated OS Command Injection
An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an authenticated attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action. id:...
Enigma
Enigma Engine Un motor de ingeniería inversa nativo en C++ inspirado en el pipeline de análisis de Ghidra. Enigma elimina la dependencia de JVM y proporciona un núcleo de análisis independiente que puede integrarse, ampliarse y conectarse directamente con herramientas nativas y sistemas de IA...
Enigma
Enigma 跨平台有效载荷投递器。 视频演示 克隆 root@kitploit: git clone https://github.com/UndeadSec/Enigma.git 运行 root@kitploit: cd Enigma root@kitploit: python enigma.py 或 python3 enigma3.py 免责声明 仅供教育用途使用 使用 Enigma 的责任完全由最终用户承担。开发者不承担任何责任，并且不对因使用本程序造成的任何误用或损害负责。...
Hack-The-Box-Enigma-Findings-Report
🛡️ Hack The Box - Informe de Hallazgos Enigma 📋 Resumen Este repositorio contiene un informe completo de prueba de penetración para la máquina Enigma de Hack The Box. 🔍 Hallazgos Clave Recurso compartido NFS inseguro que expone documentos de incorporación - Severidad Media Divulgación de...
CVE-2019-16062
NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database. It is possible for an attacker to expose unencrypted sensitive data...
CVE-2019-16064
NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenticated user to access files and directories stored outside of the web root folder. By exploiting this vulnerability, it is possible for an attacker to list operating-system directory...
CVE-2019-16068
A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious managefiles.cgi request. This can be triggered via XSS or an IFRAME tag included within the site...
CVE-2019-16065
A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to execute SQL commands to expose and compromise the web server, expose database tables and values, and potentially execute system-based commands as the mysql user...
CVE-2019-16061
A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing any low privileged user with access to the system to read sensitive data e.g., .htpasswd and create/modify/delete content e.g., under /var/www/html/docs with...
CVE-2019-16070
A number of stored Cross-site Scripting XSS vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through web application form inputs...
CVE-2019-16069
A number of stored Cross-site Scripting XSS vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through the SNMP protocol...
CVE-2019-16063
NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It is possible for an attacker to expose unencrypted sensitive data...
CVE-2019-16072
An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action...
EUVD-2019-6930
Malware in sbrugna...
EUVD-2019-6927
Malware in sbrugna...
EUVD-2018-1824
Malware in sbrugna...
EUVD-2006-2730
Malware in sbrugna...
EUVD-2019-6931
Malware in sbrugna...