jugular

jugular Usa jugs para buscar CUPS: un emisor UDP ultrarrápido, que intenta hacer cosquillas a los procesos cups-browsed en escucha para que realicen una devolución de llamada HTTP. Este es un escáner de alto rendimiento que escribe paquetes UDP directamente a la red. Instalación Ubuntu o similar...

CVE-2024-47176-Scanner

CVE-2024-47176 Escáner PoC de Evilsocket para CVE-2024-47176, recortado y convertido en un escáner. Literalmente lo abrí en vim y mantuve presionada la tecla d. Lee su investigación aquí. Este script simplemente envía el paquete UDP inicial al puerto 631 y desencadena una devolución de llamada...

CVE-2020-14882

CVE-2020-14882 此Python脚本旨在利用Oracle WebLogic Server中的远程代码执行漏洞（CVE-2020-14882），在易受攻击的目标服务器上执行命令，并通过HTTP请求捕获其输出。它首先提示输入目标WebLogic URL和网络接口，然后进入一个循环，用户可以在其中输入命令。对于每条命令，它会自动分配一个可用端口，并在该端口上创建一个临时HTTP监听器。脚本会格式化要在目标WebLogic系统上执行的命令，将其封装在一个PowerShell命令中，该命令会通过HTTP...

EUVD-2026-39817

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, the OAuth2 HTTP filter's encrypt/decrypt functions use AES-256-CBC without an authentication tag no HMAC, no AEAD. The /callback endpoint returns HTTP 302 on...

GHSA-7G27-V5WJ-JR75 free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference

Impact This is a NULL Pointer Dereference vulnerability leading to Denial of Service. - Security Impact: A remote attacker can cause the UDM service to panic and crash by sending a crafted POST request to the /sdm-subscriptions endpoint with a malformed URL path containing path traversal sequence...

Exploit for CVE-2024-47176

CVE-2024-47176 Scanner === Evilsocket's PoC for CVE-2024-47176,...

OSV-2023-896 UNKNOWN READ in deliver_chunked_chunks

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62609 Crash type: UNKNOWN READ Crash state: deliverchunkedchunks httpcb fuzz.c...

PT-2023-36017 · Git +1 · Mongoose

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to a negative-size-param issue, as reported by OSS-Fuzz. The crash involves the http cb function in fuzz.c. Recommendations: At the moment, there is no information...

CVE-2023-34105 SRS has command injection vulnerability in demonstration api-server for HTTP callback.

SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5.0.157, 5.0-b1, and 6.0.48, SRS's api-server server is vulnerable to a drive-by command injection. An attacker may send a request to the /api/v1/snapshots endpoint containing an...

Immunity Canvas: MS14_064_IE_OLEAUT32

Name| ms14064ieoleaut32 ---|--- CVE| CVE-2014-6332 Exploit Pack| CANVAS Description| MS14064 - Windows OLE Automation Array Remote Code Execution Vulnerability Notes| CVE Name: CVE-2014-6332 VENDOR: Microsoft NOTES: References:...