Lucene search
+L

12105 matches found

exploitpack
exploitpack
•added 2020/01/06 12:00 a.m.•31 views

RemShutdown 2.9.0.0 - Name Denial of Service (PoC)

RemShutdown 2.9.0.0 - Name Denial of Service PoC Exploit Title: RemShutdown 2.9.0.0 - 'Name' Denial of Service PoC Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/remshutdownsetup.exe Tested o...

7.3AI score
SaveExploits0
zdt
zdt
•added 2020/01/06 12:00 a.m.•110 views

SpotIM 2.2 - (Name) Denial Of Service Exploit

Exploit Title: SpotIM 2.2 - 'Name' Denial Of Service Exploit Author : Ismail Tasdelen Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/spotimsetup.exe Tested on OS: Windows 10 CVE : N/A ''' Proof of Concept PoC: ======================= 1.Download and...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2020/01/06 12:00 a.m.•82 views

RemShutdown 2.9.0.0 Denial Of Service

Exploit Title: RemShutdown 2.9.0.0 - 'Name' Denial of Service PoC Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://www.nsauditor.com/downloads/remshutdownsetup.exe Tested on OS: Windows 10 CVE : N/A ''' Proof of Concept...

SaveExploits0
Exploit DB
Exploit DB
•added 2020/01/06 12:00 a.m.•190 views

Office Product Key Finder 1.5.4 - Denial of Service (PoC)

Exploit Title: Office Product Key Finder 1.5.4 - Denial of Service PoC Date: 2020-01-06 Vendor Homepage: http://www.nsauditor.com/ Software Link: http://www.nsauditor.com/downloads/officeproductkeyfindersetup.exe Exploit Author: Gokkul Tested Version: v1.5.4 Tested on: Windows 7 x64 Software...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2020/01/06 12:00 a.m.•156 views

NetShareWatcher 1.5.8.0 - 'Name' Denial Of Service

Exploit Title: NetShareWatcher 1.5.8.0 - 'Name' Denial Of Service Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : http://www.nsauditor.com/ Link Software : http://netsharewatcher.nsauditor.com/downloads/NetShareWatchersetup.exe Tested on OS: Windows 10 CVE : N/A '''...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2020/01/02 12:00 a.m.•21 views

MSN Password Recovery 1.30 - Denial of Service (PoC)

MSN Password Recovery 1.30 - Denial of Service PoC Exploit Title: MSN Password Recovery 1.30 - Denial of Service PoC Date: 2020-01-02 Vendor Homepage: https://www.top-password.com/ Software Link: https://www.top-password.com/download/MSNPRSetup.exe Exploit Author: Gokkulraj Tested Version: v1.30...

0.4AI score
SaveExploits0
Kitploit
Kitploit
•added 2019/12/24 8:20 p.m.•148 views

Pylane - An Python VM Injector With Debug Tools, Based On GDB

Pylane is a python vm injector with debug tools, based on gdb and ptrace. Pylane uses gdb to trace python process, inject and run some code in its python vm. Usage use inject command to inject a python script in an process: pylane inject use shell command to inject an interactive shell: pylane...

7.6AI score
SaveExploits0References1
CNVD
CNVD
•added 2019/12/17 12:00 a.m.•23 views

Samsung S7 Edge Access Control Error Vulnerability

Samsung S7 Edge is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in Samsung S7 Edge. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploi...

7.8CVSS6.7AI score0.0031EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/12/17 12:00 a.m.•16 views

Samsung XCover4 Access Control Error Vulnerability (CNVD-2020-14771)

Samsung XCover4 is a smartphone from Samsung South Korea. An access control error vulnerability exists in the Samsung XCover4. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit the vulnerabili...

7.8CVSS6.8AI score0.0031EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/12/17 12:00 a.m.•25 views

Samsung J6 Access Control Error Vulnerability

The Samsung J6 is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in the Samsung J6. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit...

7.8CVSS6.8AI score0.0031EPSS
SaveExploits0References1
NVD
NVD
•added 2019/12/16 8:15 p.m.•17 views

CVE-2019-10773

In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set...

7.8CVSS7.7AI score0.01518EPSS
SaveExploits1References7
osv_debian
osv_debian
•added 2019/12/16 8:15 p.m.•7 views

DEBIAN-CVE-2019-10773

In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set...

7.8CVSS7.8AI score0.01518EPSS
SaveExploits1References1
Prion
Prion
•added 2019/12/16 8:15 p.m.•22 views

Design/Logic Flaw

In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set...

6.8CVSS7.5AI score0.01518EPSS
SaveExploits1References7Affected Software1
Mend
Mend
•added 2019/12/16 7:31 p.m.•11 views

CVE-2019-10773

In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set...

8.5CVSS0.01518EPSS
SaveExploits1References12
Cvelist
Cvelist
•added 2019/12/16 7:31 p.m.•44 views

CVE-2019-10773

In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set...

7.6AI score0.01518EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/16 12:00 a.m.•6 views

CVE-2019-10773: Improper Link Resolution Before File Access

In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set...

7.8CVSS7.3AI score0.01518EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/12/16 12:00 a.m.•5 views

PT-2019-12044

Name of the Vulnerable Software and Affected Versions Yarn versions prior to 1.21.1 Description The package install functionality in Yarn can be exploited to create arbitrary symlinks on the host filesystem. This can be achieved by using specially crafted "bin" keys. Depending on the current user...

7.8CVSS0.01518EPSS
SaveExploits1References23
OpenVAS
OpenVAS
•added 2019/12/15 12:00 a.m.•35 views

Fedora Update for dhcp FEDORA-2019-c703d2304a

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS6.9AI score0.04055EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2019/12/13 3:39 p.m.•15 views

GHSA-X8QC-RRCW-4R46 npm symlink reference outside of node_modules

Versions of the npm CLI prior to 6.13.3 are vulnerable to a symlink reference outside of nodemodules. It is possible for packages to create symlinks to files outside of thenodemodules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would...

7.7CVSS7.2AI score0.03422EPSS
SaveExploits0References13
osv_ghsa
osv_ghsa
•added 2019/12/13 3:39 p.m.•20 views

GHSA-M6CX-G6QM-P2CX Arbitrary File Write in npm

Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It fails to prevent access to folders outside of the intended nodemodules folder through the bin field. A properly constructed entry in the package.json bin field would allow a package publisher to create files on ...

7.7CVSS7.2AI score0.03334EPSS
SaveExploits0References15
Rows per page
Query Builder