EvilNeko

EvilNeko EvilNeko 是一个用于自动化容器编排并将浏览器中的浏览器（BITB）攻击操作化的项目，专为红队设计。灵感来源于 Mr. d0x 的研究，并在 EvilNoVNC 项目 的理念基础上进行了扩展。 该项目旨在改进现有的开源工具，构建一个可扩展的基础设施，用于针对多个目标，而非单个用户/会话。EvilNeko 为红队提供了一种逼真地模拟 BITB 技术的方式，并帮助蓝队找到检测这些技术的方法。 该工具使用 neko 项目创建可通过 WebRTC 交互的浏览器容器。通过对设置进行微小修改，我们可以利用这些容器来模拟浏览器中的浏览器技术。 EvilNeko...

OESA-2024-1631 nautilus security update

It's easier to manage your files for the GNOME desktop. Ability to browse directories on local and remote systems. preview folders and launch related programs. It is also handle icons on the GNOME desktop. Security Fixes: GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename...

SHAREit for Windows and Android Vulnerabilities

Lenovo Security Advisory: LEN-4058 Potential Impact: Remote browsing of file system, and unauthorized access of files on Windows and Android denial of service attack that could crash the Windows SHAREit client Severity: High Lenovo SHAREit Application: End of Lenovo Support Summary: Vulnerabiliti...

SHAREit for Windows and Android Vulnerabilities - Lenovo Support US

No description provided...

etype eserv 2.50 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/773/info Etype's Eserv product is designed to be a one-source internet connectivity solution, incorporating mail, web, ftp, and proxy servers into one package. The web server will allow remote browsing of the entire...

Apache <= 1.1,NCSA httpd <= 1.5.2,Netscape Server 1.12/1.1/2.0 a nph-test-cgi Vulnerability

No description provided by source. Apache = 1.1,NCSA httpd = 1.5.2,Netscape Commerce Server 1.12/Communications Server 1.1/Enterprise Server 2.0 a nph-test-cgi Vulnerability source: http://www.securityfocus.com/bid/686/info Description as given by Josh Richards: A security hole exists in the...

CVE-2006-0508

Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory...

Microsoft Windows SMB Registry : Winreg Registry Key Detection

The registry key HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg is missing. This key allows you to define what can be viewed in the registry by non administrators. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10431; scriptversion"$Revision: 1.31 $";...

etype eserv 2.50 - Directory Traversal

source: https://www.securityfocus.com/bid/773/info Etype's Eserv product is designed to be a one-source internet connectivity solution, incorporating mail, web, ftp, and proxy servers into one package. The web server will allow remote browsing of the entire filesystem by the usage of ../ strings ...