CVE-2018-15007

The Sky Elite 6.0L+ Android device with a build fingerprint of SKY/x6069trxl601sky/x6069trxl601sky:6.0/MRA58K/1482897127:user/release-keys contains a pre-installed platform app with a package name of com.fw.upgrade.sysoper versionCode=238, versionName=2.3.8 that contains an exported broadcast...

CVE-2018-15005

The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys contains a pre-installed platform app with a package name of com.zte.zdm.sdm versionCode=31, versionName=V5.0.3 that contains an exported broadcast receiver app componen...

Cisco Video Surveillance Manager Privilege Escalation

The vulnerability of the Cisco Video Surveillance Manager system is related to the use of pre-installed credentials. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with administrator privileges...

Cisco Prime Collaboration Provisioning Access Privilege

The vulnerability of the Cisco Prime Collaboration Provisioning software installation component for centralized product management involves the use of pre-installed user accounts. Exploiting this vulnerability could allow an attacker to gain access to the administrative web interface with...

CVE-2017-18355

Installed packages are exposed by nodemodules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the "where" attribute of package.json files...

CVE-2017-18355

Installed packages are exposed by nodemodules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the "where" attribute of package.json files...

Cisco Small Business Auth Bypass Privilege Escalation

The vulnerability of Cisco Small Business network device software’s microprogramming lies in the use of pre-installed credentials. This vulnerability could allow a malicious actor to bypass authentication procedures and execute arbitrary commands with administrator privileges...

Perl Modules Detection (Linux/Unix SSH Login)

SSH login-based detection of various installed Perl modules. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

PHP-Proxy 5.1.0 - Local File Inclusion

PHP-Proxy 5.1.0 - Local File Inclusion Exploit Title: PHP-Proxy 5.1.0 - Local File Inclusion Date: 2018-11-13 Exploit Author: Ameer Pornillos Contact: https://ethicalhackers.club Vendor Homepage: https://www.php-proxy.com/ Software Link: https://www.php-proxy.com/download/php-proxy.zip Version:...

PT-2018-1849

Name of the Vulnerable Software and Affected Versions Cisco Small Business Switches affected versions not specified Description A vulnerability in the software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The issue exists becau...

Zoom.us Installed (macOS)

Binary data macosxzoominstalled.nbin...

Zoom Client for Meetings Installed (Windows)

Binary data zoomclientformeetingswininstalled.nbin...

Reptile Rootkit reptile_cmd Privilege Escalation

This module uses Reptile rootkit's reptilecmd backdoor executable to gain root privileges using the root command. This module has been tested successfully with Reptile from master branch 2019-03-04 on Ubuntu 18.04.3 x64 and Linux Mint 19 x64. Module Options msf use...

Microsoft SQL Server Management Studio (SSMS) Installed

Binary data microsoftssmsinstalled.nbin...

List of Operating Systems for OSINT (Open-Source Intelligence)

PenTestIT RSS Feed All of you must be well versed with the term OSINT and it's meaning. Wikipedia defines OSINT as the data collected from publicly available sources to be used in an intelligence context. There are multiple sources and tools which help you find this information. A good example is...

MagniComp SysInfo Installed (Linux/UNIX)

Binary data magnicompsysinfonixinstalled.nbin...

Mozilla Firefox < 62 Multiple Critical Vulnerabilities (macOS)

The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 62. It is, therefore, affected by multiple critical and high severity vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid117291; scriptversion"1.8";...

OpsView Monitor Detection

Detection of OpsView Monitor. The script sends a connection request to the server and attempts to detect OpsView Monitor and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Windows Defender Advanced Threat Protection Installed (Windows)

Binary data microsoftwindowsdefenderadvancedthreatprotectionwininstalled.nbin...

Flaws in Pre-Installed Apps Expose Millions of Android Devices to Hackers

Bought a new Android phone? What if I say your brand new smartphone can be hacked remotely? Nearly all Android phones come with useless applications pre-installed by manufacturers or carriers, usually called bloatware, and there's nothing you can do if any of them has a backdoor built-in—even if...