Chinese "Override Panda" Hackers Resurface With New Espionage Attacks

A Chinese state-sponsored espionage group known as Override Panda has resurfaced in recent weeks with a new phishing attack with the goal of stealing sensitive information. "The Chinese APT used a spear-phishing email to deliver a beacon of a Red Team framework known as 'Viper,'" Cluster25 said i...

Command Execution Vulnerability in Sunflower Lite Edition

Sunflower is a free all-in-one remote control management tool software that integrates remote control of computer and cell phone, remote desktop connection, remote boot, remote management, and intranet penetration support. A command execution vulnerability exists in Sunflower Lite, which can be...

SakuraPanel 跨站脚本漏洞

SakuraPanel is an open source, Frp-based intranet penetration management panel application. a cross-site scripting vulnerability exists in SakuraPanel, which stems from an exit function in the product/master/core/PostHandler.php file that does not validate data. An attacker could print...

Viper - Intranet Pentesting Tool With Webui

Viper is a graphical intranet penetration tool, which modularizes and weaponizes the tactics and technologies commonly used in the process of Intranet penetration Viper integrates basic functions such as bypass anti-virus software, intranet tunnel, file management, command line and so on Viper ha...

Arbitrary File Read Vulnerability in Lanproxy

Lanproxy is an intranet penetration tool that proxies LAN PCs and servers to the public network, supports tcp traffic forwarding, and can support any tcp upper-layer protocols access to intranet sites, debugging of local payment interfaces, ssh access, remote desktop, etc.. Lanproxy has an...

Arbitrary File Read Vulnerability in Lanproxy Intranet Penetration Tool

Lanproxy is an intranet penetration tool that proxies LAN PCs and servers to the public network, supports tcp traffic forwarding, and can support any tcp upper-layer protocols access to intranet sites, debugging of local payment interfaces, ssh access, remote desktop, etc.. Lanproxy Intranet...

Directory Traversal Vulnerability in LanProxy Intranet Penetration Tool

Lanproxy is an intranet penetration tool that proxies services on the LAN to the public network. A path traversal vulnerability exists in lanproxy, which can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in Vulnerability Scanning System of Nanjing Iridium Information Technology Co.

Nanjing Iridium Information Technology Co., Ltd. vulnerability scanning system is a vulnerability scanner that supports IP address segment batch reverse domain name checking and intranet penetration scanning, which can support host vulnerability scanning, Web vulnerability scanning, weak password...