1184 matches found
Exploit for Code Injection in Vbulletin
vBulletin RCE 5.x Get Email + SMTP CVE-2019-16759 This tool...
Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager
RCE-CVE-2020-5902 BIG-IP F5 Remote Code Execution Descripti...
Kaiten - A Undetectable Payload Generation
A Undetectable Payload Generation. This tool is for educational purpose only, usage of Kaiten for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. Official Kaiten Repository. What is i...
SecuSTATION SC-831 HD Camera - Remote Configuration Disclosure
Exploit Title: SecuSTATION SC-831 HD Camera - Remote Configuration Disclosure Author: Todor Donev Date: 2020-02-23 Vendor: https://secu.jp/ Product Link: https://secu.jp/support/831.html CVE: N/A !/usr/bin/perl SecuSTATION SC-831 HD Camera Remote Configuration Disclosure Copyright 2020 c Todor...
Threat Roundup for February 14 to February 21
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Feb. 14 and Feb. 21. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics...
Aptina AR0130 Camera Remote Configuration Disclosure
!/usr/bin/perl Aptina AR0130 960P 1.3MP Indoor Outdoor AHD Vandalproof Camera Remote Configuration Disclosure Copyright 2020 c Todor Donev https://donev.eu/ Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies,...
Ultimate Facebook Scraper - A Bot Which Scrapes Almost Everything About A Facebook User'S Profile Including All Public Posts/Statuses Available On The User'S Timeline, Uploaded Photos, Tagged Photos, Videos, Friends List And Their Profile Photos
Tooling that automates your social media interactions to collect posts, photos, videos, friends, followers and much more on Facebook. Features A bot which scrapes almost everything about a facebook user's profile including uploaded photos tagged photos videos friends list and their profile photos...
Detecting Account Takeover Botnets
A botnet is a network of compromised computers - known as bots - usually controlled by a command and control computer, that work together in coordination for a malicious purpose. In this blog post, we’ll discuss how to detect botnets used for account takeover ATO, an attack used to obtain the val...
CVE-2019-16417: Improper Neutralization of Input During Web Page Generation
HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...
Fedora Update for jackson-databind FEDORA-2019-ae6a703b8f
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Cisco Content Security Virtual Appliance M380 IronPort Remote Cross Site Host Modification
// // // Disclaimer: // This or previous programs are for Educational purpose ONLY. Do not use it without permission. // The usual disclaimer applies, especially the fact that Todor Donev is not liable for any damages // caused by direct or indirect use of the information or functionality provide...
WordPress 5.2.3 - Cross-Site Host Modification
WordPress 5.2.3 - Cross-Site Host Modification !/usr/bin/perl -w Wordpress Type: Remote Risk: High Solution: Set security headers to web server and no-cache for Cache-Control Simple Attack Scenarios: o This attack can bypass Simple WAF to access restricted content on the web server, something lik...
Exploit for Use After Free in Microsoft
Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CV...
Vulnerability in core server (CVE-2019-10129)
Memory disclosure in partition routing Prior to this release, a user running PostgreSQL 11 can read arbitrary bytes of server memory by executing a purpose-crafted INSERT statement to a partitioned table...
Acromag 967EN General Purpose Analog I/O Detection
Binary data 762469.prm...
Rockwell Automation ArmorPoint 8pt 24Vdc Source Input M8 1738-IV8M8/A General Purpose Discrete I/O
Binary data 752628.prm...
Acromag ES2117 General Purpose Digital I/O Detection
Binary data 762540.prm...
Rockwell Automation 1771-OBDS General Purpose Discrete I/O
Binary data 753432.prm...