CVE-2022-39197-POC

CVE-2022-39197-POC Versão Chinesa READMECN.md Introdução à Vulnerabilidade De acordo com o Registro de Atualizações da versão mais recente 4.7.1 lançada oficialmente pela CobaltStrike em 20 de setembro, o teamserver versões Fomos contactados por um pesquisador independente chamado "Beichendream"...

Cobaltstrike-RCE-CVE-2022-39197

Reprodução da vulnerabilidade RCE Cobaltstrike CVE-2022-39197 Descrição da vulnerabilidade Esta vulnerabilidade existe no software Beacon do Cobalt Strike e pode permitir que um atacante defina um nome de usuário malformado na configuração do Beacon, desencadeando XSS, resultando em execução remo...

CVE-2021-21335

In the SPNEGO HTTP Authentication Module for nginx spnego-http-auth-nginx-module before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of...

CVE-2021-21335 Basic Authentication can be bypassed using a malformed username

In the SPNEGO HTTP Authentication Module for nginx spnego-http-auth-nginx-module before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of...

spnego-http-auth-nginx-module 授权问题漏洞

Sean Timothy Noonan spnego-http-auth-nginx-module is a Sean Timothy Noonan open source application. It provides a way to add SPNEGO support to nginx functionality. A security vulnerability exists in SPNEGO HTTP Authentication Module for nginx, which stems from the fact that basic authentication c...

CVE-2001-0060

Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username...

CVE-2001-0320

bbsmilies.php and bbcoderef.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. dot dot sequences into a malformed username argument...