59 matches found
Trickster-HTB
Trickster 利用报告 关于 Trickster Trickster 是一台中等难度的 Linux 机器，其多个服务中存在多种漏洞。本报告概述了利用这些漏洞以实现完全系统入侵的过程。 利用步骤 1. 利用 PrestaShop（CVE-2024-34716） PrestaShop 是一个开源电子商务平台，在启用客户工单功能标志时，容易受到 XSS 攻击。 通过利用此漏洞，我们注入恶意脚本，从而提取管理员会话令牌。 使用这些凭证，我们以 www-data 用户身份访问远程服务器。 2. 提取数据库凭证 进一步的枚举揭示了包含数据库凭证的 PrestaShop 配置文件。...
CVE-2023-47268
PrusaSlicer 任意代码执行 通过使用 .3mf 文件和存在漏洞的 prusaslicer 版本实现权限提升。 确保你可以使用 sudo 运行 prusaslicer。 Linux 1.下载文件 2.修改 exploit.sh 中的 IP 和 PORT 3.确保将 exploit.sh 放在 /tmp 目录中 4.执行以下命令 sudo ./prusaslicer -s evil.3mf 5.Exploit.sh 将以 root 身份执行...
Linux Distros Unpatched Vulnerability : CVE-2023-47268
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is...
SUSE CVE-2023-47268
In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced and G-code exported...
CVE-2023-47268
In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced and G-code exported...
EUVD-2020-20993
Malware in sbrugna...
EUVD-2020-20994
Malware in sbrugna...
EUVD-2020-20992
Malware in sbrugna...
EUVD-2020-20996
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2020-28596
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow vulnerability exists in the Objparser::objparse functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A...
PT-2025-1537
Name of the Vulnerable Software and Affected Versions Prusa PrusaSlicer versions prior to 2.6.2 Description A crafted 3mf project file can lead to arbitrary code execution on a host system during the process of slicing the project and exporting G-code. This issue occurs within the PostProcessor.c...
SUSE CVE-2020-28595
An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
SUSE CVE-2020-28596
A stack-based buffer overflow vulnerability exists in the Objparser::objparse functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
SUSE CVE-2020-28598
An out-of-bounds write vulnerability exists in the Admesh stlfixnormaldirections functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted AMF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
PrusaSlicer 安全漏洞
PrusaSlicer is a 3D printing data processing software. A security vulnerability exists in PrusaSlicer 2.6.1 and earlier versions, which stems from an arbitrary code execution vulnerability in the g-code export function...
PrusaSlicer 2.6.1 Arbitrary Code Execution
Exploit Title: PrusaSlicer 2.6.1 - Arbitrary code execution on g-code export Date: 16/01/2024 Exploit Author: Kamil Breński Vendor Homepage: https://www.prusa3d.com Software Link: https://github.com/prusa3d/PrusaSlicer Version: PrusaSlicer up to and including version 2.6.1 Tested on: Windows and...
PrusaSlicer 2.6.1 - Arbitrary code execution Vulnerability
Exploit Title: PrusaSlicer 2.6.1 - Arbitrary code execution on g-code export Exploit Author: Kamil Breński Vendor Homepage: https://www.prusa3d.com Software Link: https://github.com/prusa3d/PrusaSlicer Version: PrusaSlicer up to and including version 2.6.1 Tested on: Windows and Linux CVE:...
PrusaSlicer 2.6.1 - Arbitrary code execution
Exploit Title: PrusaSlicer 2.6.1 - Arbitrary code execution on g-code export Date: 16/01/2024 Exploit Author: Kamil Breński Vendor Homepage: https://www.prusa3d.com Software Link: https://github.com/prusa3d/PrusaSlicer Version: PrusaSlicer up to and including version 2.6.1 Tested on: Windows and...
CVE-2020-28594
A use-after-free vulnerability exists in the 3MFImporter::handleendmodel functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2020-28594
A use-after-free vulnerability exists in the 3MFImporter::handleendmodel functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...