SpoolSploit - A Collection Of Windows Print Spooler Exploits Containerized With Other Utilities For Practical Exploitation

A collection of Windows print spooler exploits containerized with other utilities for practical exploitation. Summary SpoolSploit is a collection of Windows print spooler exploits containerized with other utilities for practical exploitation. A couple of highly effective methods would be relaying...

CVE-2021-41301

ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files using an HTTP GET request. This will enable the unauthenticated attacker to remotely disclose sensitive information and help her in authentication bypass, privilege escalation...

Arista Networks MOS 安全漏洞

Arista Networks MOS is a fully programmable and highly modular Linux-based network operating system from Arista Networks, Inc. that uses the familiar industry-standard CLI and runs a single binary software image in the Arista switch family. Arista Networks MOS is vulnerable to an access control...

PT-2021-4027

Name of the Vulnerable Software and Affected Versions KUKA KR C4 control software versions prior to 8.7 Any product running KSS affected versions not specified Description The issue is related to hard-coded credentials in the system, allowing an attacker to gain full access, including read, write...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Configuration Download

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Config Download Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page: http://www.kzbtech.com | http://www.jatontec.com | https://www.neotel.mk http://www.jatontec.com/products/show.php?itemid=258...

SIEMENS LOGO! 8 BM Critical Functions Missing Certification Vulnerability

SIEMENS LOGO! 8 BM is a programming software for industrial environments for the Windows platform from Siemens Germany. A security vulnerability exists in SIEMENS LOGO! 8 BM, which can be exploited by an attacker who has access to specific services to gain unauthorized full access to all services...

RSA MFA Agent Cross-Site Scripting Vulnerability

RSA MFA Agent is a suite of authentication agent software. A cross-site scripting vulnerability exists in version 2.0 of the RSA MFA Agent for Windows-based platforms, which stems from a lack of proper authentication of client data by a WEB application. A local attacker can exploit this...

CVE-2020-5384

Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerability. A local unauthenticated attacker could potentially exploit this vulnerability by using an alternate path to bypass authentication in order to gain full access to the system...

Rockwell Automation FactoryTalk View SE Password Weak Encoding Vulnerability

Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation. A weak password encoding vulnerability exists in Rockwell Automation FactoryTalk View SE, which can be exploited by an attacker to gain full access to a user's operating system and...

Cisco Firepower Management Center Full Access

The vulnerability of Cisco Firepower Management Center’s network management software is related to the rigid coding of registration data. Exploiting these vulnerabilities could allow a malicious actor, operating remotely, to gain full access to the system using a high-privilege account...

SINEMA Remote Connect Full Access

The vulnerability of the SINEMA Remote Connect server’s web interface is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow an attacker to gain full access to the system...

CVE-2020-5846

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm7/file/upload" request with the base64-encoded pathname in the X-RSW-custom-encode-path HTTP header, and the content in the HTTP request body. It is possible to upload a file in...

PT-2019-20152

Name of the Vulnerable Software and Affected Versions wagtail-2fa versions prior to 1.3.0 Description The issue allows an attacker to bypass the 2-factor authentication 2FA check in the Wagtail CMS by manipulating the URL, potentially gaining full access to the system if they have obtained a user...

PT-2019-3064 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge HTML-based affected versions not specified Description: A remote code execution issue exists in the way the Chakra scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code in the contex...

CVE-2019-10267

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the...

CVE-2019-10267: Unrestricted Upload of File with Dangerous Type

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the...

CVE-2019-7667

Prima Systems FlexAir, Versions 2.3.38 and prior. The application generates database backup files with a predictable name, and an attacker can use brute force to identify the database backup file name. A malicious actor can exploit this issue to download the database file and disclose login...

Optergy Proton/Enterprise Arbitrary Code Execution Vulnerability

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. A security vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier. The vulnerability can be exploited by an attacker to navigate directly to an undocumented backdoor script, gain full...

CVE-2019-9189

Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when configuring the main central controller. These scripts can be immediately executed because of root code execution, not as a web server user, allowing an authenticated attacker t...

PT-2019-19424

Name of the Vulnerable Software and Affected Versions Prima Systems FlexAir versions 2.4.9api3 and prior Description The issue allows the upload of arbitrary Python scripts when configuring the main central controller. These scripts can be immediately executed due to root code execution, enabling...