Lucene search
+L

323 matches found

NVD
NVD
added 2018/09/25 12:29 a.m.43 views

CVE-2018-14647

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...

7.5CVSS6.9AI score0.10911EPSS
SaveExploits0References16
Kitploit
Kitploit
added 2018/09/19 12:25 p.m.87 views

EggShell - iOS/macOS/Linux Remote Administration Tool

EggShell is a post exploitation surveillance tool written in Python. It gives you a command line session with extra functionality between you and a target machine. EggShell gives you the power and convenience of uploading/downloading files, tab completion, taking pictures, location tracking, shel...

7.9AI score
SaveExploits0References2
Prion
Prion
added 2018/09/18 5:29 p.m.36 views

Command injection

Python Software Foundation Python CPython version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in shutil module makearchive function that can result in Denial of service, Information gain via injection of arbitrary files on...

7.5CVSS9.8AI score0.20126EPSS
SaveExploits1References11Affected Software4
OSV
OSV
added 2018/09/18 5:29 p.m.39 views

CVE-2018-1000802

Python Software Foundation Python CPython version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in shutil module makearchive function that can result in Denial of service, Information gain via injection of arbitrary files on...

9.8CVSS7.4AI score
SaveExploits0References11
Cvelist
Cvelist
added 2018/09/18 12:00 a.m.46 views

CVE-2018-1000802

Python Software Foundation Python CPython version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in shutil module makearchive function that can result in Denial of service, Information gain via injection of arbitrary files on...

9.9AI score0.20126EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2018/09/10 12:00 a.m.12 views

PT-2018-1947 · Libexpat +7 · Expat +7

Name of the Vulnerable Software and Affected Versions: Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15 Description: The issue is related to Python's elementtree C accelerator failing to initialize Expat's hash salt during initialization...

10CVSS6.3AI score0.73327EPSS
SaveExploits72References488
exploitpack
exploitpack
added 2018/09/07 12:00 a.m.20 views

DVD Photo Slideshow Professional 8.07 - Buffer Overflow (SEH)

DVD Photo Slideshow Professional 8.07 - Buffer Overflow SEH Exploit Title: DVD Photo Slideshow Professional 8.07 - Buffer Overflow SEH Date: 2018-09-06 Exploit Author:T3jv1l Vendor Homepage:http://www.dvd-photo-slideshow.com/ Software:www.dvd-photo-slideshow.com/dpsinstall.exe Category:Local...

0.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2018/08/22 12:00 a.m.78 views

Python 2.7.x < 2.7.15 Heap-Based Buffer Overflow Vulnerability Python Issue (bpo-31530) - Mac OS X

Python is prone to a heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

3.6CVSS6.9AI score0.01186EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2018/07/24 12:00 a.m.48 views

Davolink DVW 3200 Router Password Disclosure

Exploit Title: Davolink DVW 3200 Router - Password Disclosure Google Dork: N/A Zoomeye dork : https://www.zoomeye.org/searchResult?q=%22var%20userpasswd%22%20%2Bapp%3A%22DAVOLINK%20GAPD-7000%20WAP%20httpd%22 Date: 2018-07-13 Exploit Author: Ankit Anubhav Vendor Homepage: www.davolink.co.kr Softwa...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2018/07/23 12:00 a.m.21 views

Davolink DVW 3200 Router - Password Disclosure

Davolink DVW 3200 Router - Password Disclosure Exploit Title: Davolink DVW 3200 Router - Password Disclosure Google Dork: N/A Zoomeye dork : https://www.zoomeye.org/searchResult?q=%22var%20userpasswd%22%20%2Bapp%3A%22DAVOLINK%20GAPD-7000%20WAP%20httpd%22 Date: 2018-07-13 Exploit Author: Ankit...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/07/23 12:00 a.m.40 views

Davolink DVW 3200 Router - Password Disclosure

Exploit Title: Davolink DVW 3200 Router - Password Disclosure Google Dork: N/A Zoomeye dork : https://www.zoomeye.org/searchResult?q=%22var%20userpasswd%22%20%2Bapp%3A%22DAVOLINK%20GAPD-7000%20WAP%20httpd%22 Date: 2018-07-13 Exploit Author: Ankit Anubhav Vendor Homepage: www.davolink.co.kr Softwa...

9.8CVSS8.5AI score0.10123EPSS
SaveExploits2
Kitploit
Kitploit
added 2018/07/18 2:30 p.m.59 views

Noisy - Simple Random DNS, HTTP/S Internet Traffic Noise Generator

A simple python script that generates random HTTP/DNS traffic noise in the background while you go about your regular web browsing, to make your web traffic data less valuable for selling and for extra obscurity. Tested on MacOS High Sierra, Ubuntu 16.04 and Raspbian Stretch and is compatable wit...

7.1AI score
SaveExploits0References5
Kitploit
Kitploit
added 2018/06/30 2:07 p.m.101 views

Aker - SSH Bastion/Jump Host/Jumpserver

Aker is a security tool that helps you configure your own Linux ssh jump/bastion host. Named after an Egyptian mythology deity who guarded the borders, Aker would act as choke point through which all your sysadmins and support staff access Linux production servers. Aker SSH gateway includes a lot...

7.3AI score
SaveExploits0References4
n0where
n0where
added 2018/06/25 3:42 p.m.74 views

The OSINT Omnibus

An Omnibus is defined as a volume containing several novels or other items previously published separately and that is exactly what the InQuest Omnibus project intends to be for Open Source Intelligence collection, research, and artifact management. By providing an easy to use interactive command...

SaveExploits0References1
Kitploit
Kitploit
added 2018/06/11 2:10 p.m.34 views

Omnibus - Open Source Intelligence Collection, Research, And Artifact Management

An Omnibus is defined as a volume containing several novels or other items previously published separately and that is exactly what the InQuest Omnibus project intends to be for Open Source Intelligence collection, research, and artifact management. By providing an easy to use interactive command...

7.1AI score
SaveExploits0References2
FreeBSD
FreeBSD
added 2018/05/01 12:00 a.m.48 views

python 2.7 -- multiple vulnerabilities

python release notes: Multiple vulnerabilities has been fixed in this release. Please refer to the CVE list for details...

9.8CVSS1.9AI score0.13335EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2018/04/27 9:12 p.m.46 views

Grok-backdoor - Backdoor With Ngrok Tunnel Support

Grok-backdoor is a simple python based backdoor, it uses Ngrok tunnel for the communication. Ngrok-backdoor can generate windows, linux and mac binaries using Pyinstaller. Disclaimer: All the code provided on this repository is for educational/research purposes only. Any actions and/or activities...

7.5AI score
SaveExploits0References1
zdt
zdt
added 2018/04/26 12:00 a.m.24 views

Allok AVI to DVD SVCD VCD Converter 4.0.1217 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Title: Allok AVI to DVD SVCD VCD Converter 4.0.1217 - Buffer Overflow SEH Exploit Author:T3jv1l Vendor Homepage:http://www.alloksoft.com/ Software: www.alloksoft.com/allokavi2dvd.exe Category:Local Contact:https://twitter.com/T3jv1l...

7.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/04/24 12:00 a.m.25 views

Allok Video to DVD Burner 2.6.1217 - Buffer Overflow (SEH)

Exploit Title: Buffer OverflowSEH on Allok Video to DVD Burner2.6.1217 Date: 23.04.2018 Exploit Author:T3jv1l Vendor Homepage:http://www.alloksoft.com/ Software: www.alloksoft.com/allokdvdburner.exe Category:Local Contact:https://twitter.com/T3jv1l Version: Allok Video to DVD Burner 2.6.1217 Test...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/04/24 12:00 a.m.27 views

Allok Video To DVD Burner 2.6.1217 Buffer Overflow

Exploit Title: Buffer OverflowSEH on Allok Video to DVD Burner2.6.1217 Date: 23.04.2018 Exploit Author:T3jv1l Vendor Homepage:http://www.alloksoft.com/ Software: www.alloksoft.com/allokdvdburner.exe Category:Local Contact:https://twitter.com/T3jv1l Version: Allok Video to DVD Burner 2.6.1217 Test...

0.5AI score
SaveExploits0
Rows per page
Query Builder