Lucene search
+L

161 matches found

KittySploit
KittySploit
•added 2026/08/19 5:37 a.m.•8 views

MVPower DVR Jaws RCE

Module exploits MVPower DVR Jaws RCE vulnerability through 'shell' resource.Successful exploitation allows remote unauthorized attacker to execute commands on operating system level. Vulnerablity was actively used by IoT Reaper botnet. !/usr/bin/env python3 -- coding: utf-8 -- """MVPower DVR Jaws...

6.3AI score
SaveExploits0References3
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•5 views

Bullwark Momentum Series JAWS 1.0 - Local File Inclusion Detection

Bullwark Momentum Series JAWS 1.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Bullwark Momentum Series JAWS 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bullwar...

5.9AI score
SaveExploits0References3
Snyk
Snyk
•added 2026/07/27 4:15 p.m.•14 views

Malicious Package

Overview nemo-jaws is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/04/16 10:07 a.m.•19 views

Malicious code in nemo-jaws (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b0aca2f522f9d9ab39b1b2ddf4f16b0e2d5c40b796392848c3a3ac77e73fa On npm install, the package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir, and...

5.6AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2026/04/16 10:07 a.m.•20 views

MAL-2026-2785 Malicious code in nemo-jaws (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b0aca2f522f9d9ab39b1b2ddf4f16b0e2d5c40b796392848c3a3ac77e73fa On npm install, the package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir, and...

5.6AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2026/02/12 10:48 p.m.•13 views

CVE-2019-25333

Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP request paths. Attackers can exploit the vulnerability by sending crafted GET requests with multiple '../' sequences to read sensitive...

8.7CVSS5.5AI score0.00744EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/02/12 10:48 p.m.•31 views

CVE-2019-25333

CVE-2019-25333 affects Bullwark Momentum Series JAWS 1.0. The issue is a directory traversal vulnerability where unauthenticated attackers can read sensitive files by manipulating HTTP request paths with multiple “../” sequences, potentially reading files such as “/etc/passwd” outside the web roo...

8.7CVSS8.1AI score0.00744EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/12 10:48 p.m.•46 views

CVE-2019-25333 Bullwark Momentum Series JAWS 1.0 - 'Momentum Series JAWS' Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP request paths. Attackers can exploit the vulnerability by sending crafted GET requests with multiple '../' sequences to read sensitive...

8.7CVSS0.00744EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/12 12:00 a.m.•29 views

PT-2026-7932

Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP request paths. Attackers can exploit the vulnerability by sending crafted GET requests with multiple '../' sequences to read sensitive...

8.7CVSS5.5AI score0.00744EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/12 12:00 a.m.•10 views

CVE-2019-25333: Improper Limitation of a Pathname to a Restricted Directory

Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP request paths. Attackers can exploit the vulnerability by sending crafted GET requests with multiple '../' sequences to read sensitive...

8.7CVSS8.1AI score0.00744EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2005-1802

Malware in sbrugna...

4.3CVSS6.4AI score0.03057EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2004-2059

Malware in sbrugna...

7.5CVSS6.4AI score0.02795EPSS
SaveExploits2References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2005-2180

Malware in sbrugna...

5CVSS6.4AI score0.02057EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2005-1234

Malware in sbrugna...

4.3CVSS6.4AI score0.01939EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2004-2435

Malware in sbrugna...

4.3CVSS6.4AI score0.04203EPSS
SaveExploits2References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2006-3289

Malware in sbrugna...

7.5CVSS6.4AI score0.04673EPSS
SaveExploits2References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-23319

Malware in sbrugna...

7.2CVSS7.2AI score0.02507EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-23320

Malware in sbrugna...

7.2CVSS7.2AI score0.02507EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2009-0648

Malware in sbrugna...

6.5CVSS6.4AI score0.06278EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2004-2436

Malicious code in bioql PyPI...

5CVSS6.4AI score0.08432EPSS
SaveExploits2References5
Rows per page
Query Builder