TP-Link Archer C50 3 - Denial of Service Exploit

Exploit Title: TP-Link Archer C50 3 - Denial of Service PoC Exploit Author: thewhiteh4t Vendor Homepage: https://www.tp-link.com/ Version: TP-Link Archer C50 v3 Build 171227 Tested on: Arch Linux x64 CVE: CVE-2020-9375 Description:...

Google Kubernetes Resource Management Error Vulnerability

Google Kubernetes is a set of open source Docker container cluster management system from the U.S. company Google Google. The system provides resource scheduling, deployment and operation, service discovery and scaling up and down for containerized applications. A resource management error...

Fedora: Security Advisory for libarchive (FEDORA-2020-235688c222)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

ZyXEL Cloud CNM SecuManager Unauthorized Remote Code Execution Vulnerability

Zyxel Cloud CNM SecuManager is a full-featured network management software that provides an integrated console to monitor and manage security grids, including the ZyWALLUSG and VPN series. An unauthorized remote code execution vulnerability exists in Zyxel Cloud CNM SecuManager, which can be...

HTTP Asynchronous Reverse Shell - Asynchronous Reverse Shell Using The HTTP Protocol

Today there are many ways to create a reverse shell in order to be able to remotely control a machine through a firewall. Indeed, outgoing connections are not always filtered. However security software and hardware IPS, IDS, Proxy, AV, EDR... are more and more powerful and can detect these attack...

SQL Injection Vulnerability in Eight Image Encryption Platforms

Eight Image Encryption Platform is designed and developed in php+mysql environment by calling the API of Eight Image Platform. There is a SQL injection vulnerability in Eight Image Encryption Platform, which can be exploited by attackers to gain database privileges...

SynTP.sys Driver Unauthorized Access

The vulnerability of the SynTP.sys driver for Synaptics Touchpads is related to errors in handling API requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Unauthorized Access Vulnerability in Jingyun Network Antivirus System

Jingyun Network Antivirus System is a new generation of enterprise-level anti-virus security protection software launched by T&S Leader. KingCloud Network Antivirus System has an unauthorized access vulnerability, which can be exploited by attackers to directly access the api to obtain sensitive...

EulerOS 2.0 SP8 : bind (EulerOS-SA-2020-1141)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP...

metasploit-framework

This is the Metasploit Framework repository, a widely used penetration testing tool. It is an offensive tool for penetration testing and vulnerability assessment. The primary target of this tool is the Metasploit Framework itself, which is a Ruby-based framework for developing and executing...

[SECURITY] Fedora 31 Update: ksh-2020.0.0-2.fc31

KornShell is a shell programming language, which is upward compatible with "sh" the Bourne Shell...

Fedora: Security Advisory for ksh (FEDORA-2020-d940aca772)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-8612

In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API endpoint failed to adequately sanitize malicious input, which could allow an authenticated attacker to execute arbitrary code in a victim's browser, aka XSS...

Agente - Distributed Simple And Robust Release Management And Monitoring System

Distributed simple and robust release management and monitoring system. This project on going work. Road map Core system First worker agent Management dashboard Jenkins vs CI tool extensions Management dashboard First master agent All relevant third-party system integrations version control, CI,...

exploit-database

This is an official repository of The Exploit Database, a project sponsored by Offensive Security. The repository contains exploits, shellcodes, and papers for various vulnerabilities in different software and systems. The exploits are categorized by operating system, software, and vulnerability...

UBUNTU-CVE-2015-5741

The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request that contains Content-Length and Transfer-Encoding header fields...

PT-2020-7285

Name of the Vulnerable Software and Affected Versions: NETGEAR WGR614 versions v7 through v9 Description: An authentication issue exists due to a hardcoded credential used for serial programming. Recommendations: For NETGEAR WGR614 versions v7 through v9, at the moment, there is no information...

CVE-2012-6340: Improper Authentication

An Authentication vulnerability exists in NETGEAR WGR614 v7 and v9 due to a hardcoded credential used for serial programming, a related issue to CVE-2006-1002...

CVE-2019-20446

In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially...

Iranian Hackers Target U.S. Gov. Vendor With Malware

Iran-linked threat actor APT34 has been observed sending targeted, malicious email attachments to customers and employees of a company that works closely with U.S. government agencies. The company in question is U.S.-based Westat, a professional services company that provides research services to...