CVE-2023-27357 NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability

NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific...

CVE-2023-51971

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo...

SUSE CVE-2014-1950

Use-after-free vulnerability in the xccpupoolgetinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded toolstack, does not properly handle a failure by the xccpumapalloc function, which allows local users with access to management functions to cause a denial of service heap corrupti...

SUSE CVE-2019-19391

In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and options are mishandled. NOTE: The LuaJIT project owner states that...

UBUNTU-CVE-2021-28211

A heap overflow in LzmaUefiDecompressGetInfo function in EDK II...

DEBIAN-CVE-2019-19391

In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and options are mishandled. NOTE: The LuaJIT project owner states that...

Podman / Varlink Remote Code Execution

!/usr/bin/python -- coding: UTF-8 -- pickletime.py Podman + Varlink Insecure Config Remote Exploit Jeremy Brown jbrown3264/gmail @ Oct 2019 ------- Details ------- Podman is container engine / platform similar to Docker supported by RedHat and Fedora with Varlink being a protocol to exchange...

Post-Exploitation Framework for Linux Written in Bash: Orc

Orc is a simple post-exploitation written in bash. I wrote this because I myself needed a more featureful post-exploitation toolkit for Linux. It’s part of a larger bundle of scripts and tools, but I’ll add those as I write and re-write them. It takes the form of an ENV script, so load orc into a...

Remote Command Execution (RCE)

pdf-image is vulnerable to remote code execution RCE attacks. The vulnerability exists as unsanitized user input could be fed into the exec of getInfo, leading to remote code execution RCE attacks...

SQL Injection Vulnerability in the getInfo Interface Function of Jiusi OA System

Ninth OA system is the OA system to install, implement, learn, operate and maintain. A SQL injection vulnerability exists in the Ninth OA System. The lack of filtering of the 'getInfo' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the database...

PT-2019-15837 · Luajit +3 · Luajit +3

Name of the Vulnerable Software and Affected Versions: LuaJIT versions 2.0.5 and earlier Moonjit versions prior to 2.1.2 Description: The issue involves a type confusion problem in the debug.getinfo function, which can lead to arbitrary memory write or read operations due to mishandling of certai...

BiWEB最新商城版注入又一枚

简要描述： BiWEB最新商城版注入又一枚 详细说明： 在wooyun上看到了有人提了BiWEB的一个XSS漏洞：http://wooyun.org/bugs/wooyun-2010-049745，也有人提了SQL注入，我来找找其他的漏洞吧。去官网下BiWEB商城版最新的5.8.4来看看。...

BiWEB最新商城版绕过过滤注入漏洞大礼包

简要描述： BiWEB最新商城版绕过过滤注入漏洞大礼包 详细说明： 在wooyun上看到了有人提了BiWEB商城版的一个XSS漏洞： WooYun: BIWEB商城版XSS盲打cookie ，也有人提了SQL注入，我来找找其他的漏洞吧。去官网下BiWEB商城版最新的5.8.4来看看。 BiWEB对用户输入进行了全局过滤，但是这种过滤方法比较NC，这个漏洞就是来绕过全局过滤的。先来看看这个全局过滤方法吧/config/filtrate.inc.php...

BiWEB最新门户版绕过过滤注入漏洞小礼包

简要描述： BiWEB最新门户版绕过过滤注入漏洞小礼包，绕过全局过滤，造成多处可以注入 详细说明： 在wooyun上看到了有人把biweb的shell拿到了： WooYun: BIWEB门户版Getwebshell漏洞 ，也有人提了其他漏洞，我也来找找它的漏洞吧。去官网下BiWEB门户版最新的5.8.3来看看。 BiWEB对用户输入进行了全局过滤，但是这种过滤方法比较NC，这个漏洞就是来绕过全局过滤的。先来看看这个全局过滤方法吧/config/filtrate.inc.php...

BiWEB最新门户版注入又一枚

简要描述： BiWEB最新门户版注入又一枚，全局过滤的一个遗漏点 详细说明： 在wooyun上看到了有人把biweb的shell拿到了： WooYun: BIWEB门户版Getwebshell漏洞 ，也有人提了其他漏洞，我也来找找它的漏洞吧。去官网下BiWEB门户版最新的5.8.3来看看。...

openSUSE Security Update : samba (openSUSE-SU-2013:1787-1)

"the following security issues were fixed in samba : - ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; bso10229 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

bitcoinrpc-info NSE Script

Obtains information from a Bitcoin server by calling getinfo on its JSON-RPC interface. Script Arguments creds.global http credentials used for the query user:pass slaxml.debug See the documentation for the slaxml library. creds.service See the documentation for the creds library. http.host,...

Professional Download Assistant 0.1 - Database Disclosure

Professional Download Assistant downloads.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : Professional Download Assistant Download :...

Professional Download Assistant 0.1 Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Professional Download Assistant 0.1 Database Disclosure Vulnerability ===================================================================== Professional Download Assista...

Medal of Honor - 'getinfo' Remote Buffer Overflow

/ MOHAA Win32 Server Buffer-Overflow Exploit getinfo Written by RunningBon Please use this responsibly, as I am not responsible for any damage you cause by using it. IRC: irc.rizon.net kik E-mail: [email protected] Thanks to: Luigi Auriemma, Metasploit, everyone else You know who you are...