Lucene search
+L

4333 matches found

Kitploit
Kitploit
added 2018/07/27 1:43 p.m.60 views

Pure Blood v2.0 - A Penetration Testing Framework Created For Hackers / Pentester / Bug Hunter

A Penetration Testing Framework created for Hackers / Pentester / Bug Hunter. Web Pentest / Information Gathering: Banner Grab Whois Traceroute DNS Record Reverse DNS Lookup Zone Transfer Lookup Port Scan Admin Panel Scan Subdomain Scan CMS Identify Reverse IP Lookup Subnet Lookup Extract Page...

8.3AI score
SaveExploits0References2
OSV
OSV
added 2018/07/27 4:29 a.m.5 views

DEBIAN-CVE-2018-14617

An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfspluslookup in fs/hfsplus/dir.c when opening a file that is purportedly a hard link in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata...

5.5CVSS6.1AI score0.02523EPSS
SaveExploits1References1
OSV
OSV
added 2018/07/27 12:0 a.m.6 views

UBUNTU-CVE-2018-14617

An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfspluslookup in fs/hfsplus/dir.c when opening a file that is purportedly a hard link in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata...

5.5CVSS6.7AI score0.02523EPSS
SaveExploits1References8
CNVD
CNVD
added 2018/07/27 12:0 a.m.10 views

Linux kernel null pointer dereference vulnerability (CNVD-2018-24483)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'hfspluslookup' function in the fs/hfsplus/dir.c file in Linux kernel versions 4.17.10 and earlier. An attacker can exploit this...

7.1CVSS5.9AI score0.02523EPSS
SaveExploits1References1
OSV
OSV
added 2018/07/23 8:29 p.m.6 views

UBUNTU-CVE-2016-10728

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection...

5.3CVSS6AI score0.02091EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2018/07/23 2:11 p.m.26 views

NETworkManager - A Powerful Tool For Managing Networks And Troubleshoot Network Problems

A powerful tool for managing networks and troubleshoot network problems! Features Network Interface - Information, Configure IP-Scanner Port-Scanner Ping Traceroute DNS Lookup Remote Desktop PuTTY SNMP - Get, Walk, Set v1, v2c, v3 Wake on LAN HTTP Headers Subnet Calculator - Calculator, Subnettin...

7.5AI score
SaveExploits0References2
NVD
NVD
added 2018/07/19 1:29 p.m.30 views

CVE-2017-7481

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2...

9.8CVSS7.4AI score0.04844EPSS
SaveExploits0References11
Prion
Prion
added 2018/07/19 1:29 p.m.28 views

Remote code execution

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2...

7.5CVSS9.3AI score0.04844EPSS
SaveExploits0References11Affected Software9
OSV
OSV
added 2018/07/19 1:29 p.m.34 views

CVE-2017-7481

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2...

9.8CVSS9.5AI score
SaveExploits0References11
OSV
OSV
added 2018/07/19 1:29 p.m.8 views

DEBIAN-CVE-2017-7481

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2...

9.8CVSS7.5AI score0.04844EPSS
SaveExploits0References1
PyPA
PyPA
added 2018/07/19 1:29 p.m.11 views

PYSEC-2018-41

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2...

9.8CVSS7.5AI score0.04844EPSS
SaveExploits0References12Affected Software1
Debian CVE
Debian CVE
added 2018/07/19 1:0 p.m.62 views

CVE-2017-7481

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2...

9.8CVSS6.7AI score0.04844EPSS
SaveExploits0
Cvelist
Cvelist
added 2018/07/19 1:0 p.m.40 views

CVE-2017-7481

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2...

5.3CVSS9.5AI score0.04844EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
added 2018/07/19 12:0 a.m.35 views

CVE-2017-7481

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2...

9.8CVSS6.9AI score0.04844EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2018/07/12 2:9 p.m.29 views

Webkiller - Tool Information Gathering Write By Python.

Tool Information Gathering Write With Python. ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║ ██║ ██╔══╝ ██╔══██╗...

7.3AI score
SaveExploits0References1
CNVD
CNVD
added 2018/07/09 12:0 a.m.10 views

Jirafeau Cross-Site Request Forgery Vulnerability

Jirafeau is a file sharing website system. A cross-site request forgery vulnerability exists in the administration panel in Jirafeau versions prior to 3.4.1. A remote attacker can exploit this vulnerability to force an administrator to perform a file lookup operation and perform a cross-site...

8.8CVSS8.5AI score0.00523EPSS
SaveExploits1References1
OSV
OSV
added 2018/07/03 12:0 a.m.6 views

UBUNTU-CVE-2018-13093

An issue was discovered in fs/xfs/xfsicache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookupslow on a NULL inode-iops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free...

5.5CVSS6.7AI score0.01725EPSS
SaveExploits0References9
Kitploit
Kitploit
added 2018/07/01 10:10 p.m.978 views

Devploit v3.6 - Information Gathering Tool

Devploit is a simple python script to Information Gathering. Download: git clone https://github.com/joker25000/Devploit How to use: cd Devploit chmod +x install ./install Run in Terminal Devploit To run in Android you do not install file Run direct python2 Devploit Properties: DNS Lookup Whois...

7.2AI score
SaveExploits0References1
Hacker One
Hacker One
added 2018/06/29 9:53 p.m.50 views

Nextcloud: Accessing to download.nextcloud.com from original ip adreess | insecure Download

Hi team , Summary I found that when I can access from original ip to the web site ,.This disable Https secure connection. Description First I make DNS Lookup to find the ip adress download.nextcloud.com has address 88.198.160.133 F313820 Now When I open The website from download.nextcloud.com I s...

6.9AI score
SaveExploits0
Kitploit
Kitploit
added 2018/06/25 2:9 p.m.218 views

Amass - In-depth Subdomain Enumeration

The Amass tool performs scraping of data sources, recursive brute forcing, crawling of web archives, permuting and altering of names and reverse DNS sweeping to obtain additional subdomain names. Additionally, Amass uses the IP addresses obtained during resolution to discover associated netblocks...

7AI score
SaveExploits0References2
Rows per page
Query Builder