Metasploitable3-pentest-lab

🛡️ Metasploitable3 — Home Lab Penetration Test Report Aut...

EUVD-2020-27130

Malware in sbrugna...

EUVD-2022-49848

Malicious code in bioql PyPI...

EUVD-2023-53256

Malicious code in bioql PyPI...

UBUNTU-CVE-2025-38397

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning When I run the NVME over TCP test in virtme-ng, I get the following "suspicious RCU usage" warning in nvmempathaddsysfslink: ''' 5.024557 T44 nvmet: Created nvm controller 1 for...

CVE-2022-47071

In NVS365 V01, the background network test function can trigger command execution...

CVE-2022-44355

SolarView Compact 7.0 is vulnerable to Cross-site Scripting XSS via /networktest.php...

CVE-2020-5976

NVIDIA GeForce NOW, versions prior to 2.0.23 Windows, macOS and versions prior to 5.31 Android, Shield TV, contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure...

Malicious code in network-test-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f3556105e3d88ae9ead88263d04cf512babaad83e9f169da9751c0b6d86e022 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12009 Malicious code in network-test-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f3556105e3d88ae9ead88263d04cf512babaad83e9f169da9751c0b6d86e022 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-49254

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, howeve...

CVE-2023-49254

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, howeve...

CVE-2023-49254 Command injection in the network test tools

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, howeve...

CVE-2023-49254 Command injection in the network test tools

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, howeve...

PT-2024-13711 · Hongdian · H8951-4G-Esp +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An authenticated user can execute arbitrary commands in the context of the root user by providing a payload in the destination field of the network test...

VulnCheck KEV: CVE-2022-40881

SolarView Compact 6.00 was discovered to contain a command injection vulnerability via networktest.php...

CVE-2022-47071

In NVS365 V01, the background network test function can trigger command execution...

Command injection

In NVS365 V01, the background network test function can trigger command execution...

CVE-2022-47071

In NVS365 V01, the background network test function can trigger command execution...

CVE-2022-47071

CVE-2022-47071 affects NVS365 V01; the background network test function can trigger command execution, enabling high-impact remote control. CVSSv3.1 base score 9.8 (Network, Privileges None, User Interaction None; Confidentiality/Integrity/Availability High). Some sources recommend temporarily di...