CVE-2020-14882

CVE-2020-14882 यह Python स्क्रिप्ट Oracle WebLogic Server CVE-2020-14882 में एक Remote Code Execution भेद्यता का शोषण करने के लिए डिज़ाइन की गई है, ताकि कमजोर लक्ष्य सर्वर पर कमांड निष्पादित किए जा सकें और उनके आउटपुट को HTTP अनुरोधों के माध्यम से कैप्चर किया जा सके। यह पहले एक लक्ष्य WebLogic UR...

CVE-2024-47176-Scanner

Scanner per CVE-2024-47176 Il PoC di Evilsocket per CVE-2024-47176, ridotto e trasformato in uno scanner. L'ho letteralmente aperto in vim e ho tenuto premuto il tasto d. Leggi la sua ricerca qui. Questo script invia semplicemente il pacchetto UDP iniziale alla porta 631 e attiva un callback http...

jugular

jugular Usa jugs per cercare CUPS: un inviatore UDP ultraveloce, che cerca di stuzzicare i processi cups-browsed in ascolto per farli eseguire un callback HTTP. Questo è uno scanner ad alte prestazioni che scrive pacchetti UDP direttamente sulla rete. Installazione Ubuntu o simile root@kitploit:...

GHSA-7G27-V5WJ-JR75 free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference

Impact This is a NULL Pointer Dereference vulnerability leading to Denial of Service. - Security Impact: A remote attacker can cause the UDM service to panic and crash by sending a crafted POST request to the /sdm-subscriptions endpoint with a malformed URL path containing path traversal sequence...

Exploit for CVE-2024-47176

CVE-2024-47176 Scanner === Evilsocket's PoC for CVE-2024-47176,...

OSV-2023-896 UNKNOWN READ in deliver_chunked_chunks

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62609 Crash type: UNKNOWN READ Crash state: deliverchunkedchunks httpcb fuzz.c...

PT-2023-36017 · Git +1 · Mongoose

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to a negative-size-param issue, as reported by OSS-Fuzz. The crash involves the http cb function in fuzz.c. Recommendations: At the moment, there is no information...

CVE-2023-34105 SRS has command injection vulnerability in demonstration api-server for HTTP callback.

SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5.0.157, 5.0-b1, and 6.0.48, SRS's api-server server is vulnerable to a drive-by command injection. An attacker may send a request to the /api/v1/snapshots endpoint containing an...

Immunity Canvas: MS14_064_IE_OLEAUT32

Name| ms14064ieoleaut32 ---|--- CVE| CVE-2014-6332 Exploit Pack| CANVAS Description| MS14064 - Windows OLE Automation Array Remote Code Execution Vulnerability Notes| CVE Name: CVE-2014-6332 VENDOR: Microsoft NOTES: References:...