The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto استغلال كتابة ملف هذا الاستغلال يبحث في عناوين Global Protect URLS ويحاول كتابة ملف باستخدام CVE-2024-3400 استخدم بحذر أُعد لأغراض تعليمية فقط الاستخدام: chmod +x gp-exploit.sh ./gp-exploit.sh filenametowrite urls.txt بحث Shodan وتصفية العناوين: shodan search...

CVE-2014-4688

CVE-2014-4688 python3 pfsense.py --rhost 10.10.10.60 --lhost 10.10.14.2 --lport 9999 --username rohit --password pfsense...

how-to-bypass-aslr-on-linux-x86_64

كسر ASLR بتقنية 64 بت على Linux x86-64 في هذا المقال، سأناقش تطبيق التقنية التي وصفها Samuel Groß في Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass، لتجاوز ASLR على Linux x8664. لإظهار ذلك، سأحل تحديًا من نوع pwnable من Buckeye CTF، اسمه guessgod. سأحا...

Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit سكربت bash يتيح تحديد و/أو استغلال ثغرة Log4shell عن بُعد. تقوم هذه الأداة بإجراء اختبارات مختلفة باستخدام حمولات LDAP ورؤوس X-Api-Version وUser-Agent وX-Forwarded-For. استخدم هذا السكربت دائمًا بعد الحصول على إذن مسبق من مالك الخدمة/التطبيق الذي يتم تدقيقه. التبعيات: 1...

CVE-2025-3248-POC

CVE-2025-3248-POC CVE-2025-3248 का POC लक्ष्य मशीन पर कोई भी कमांड निष्पादित करें उपयोग: python poc.py 'http://xxx.com' 'ls /' पीड़ितों के कंप्यूटर पर कुछ प्यार छोड़ें poc.py...

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 الوصف الثغرة موجودة في منتج Oracle WebLogic Server من Oracle Fusion Middleware المكوّن: Core. الإصدارات المتأثرة المدعومة هي 12.2.1.4.0 و14.1.1.0.0. هذه الثغرة سهلة الاستغلال وتسمح لمهاجم غير مصادق مع إمكانية الوصول إلى الشبكة عبر T3 أو IIOP باختراق Oracle WebLogic...

leviathan

Leviathan एक बड़े पैमाने पर ऑडिट टूलकिट है जिसमें सेवा खोज, ब्रूट फोर्स, SQL इंजेक्शन का पता लगाने और कस्टम एक्सप्लॉइट चलाने की व्यापक क्षमताएं हैं। इसमें masscan, ncrack, dsss जैसे ओपन सोर्स टूल शामिल हैं और यह आपको उन्हें संयोजन में उपयोग करने की सुविधा देता है। इस परियोजना का मुख्य लक्ष्य किसी...

Remot3d

Remot3d - शोषण करने का एक आसान तरीका जल्द ही अपडेट किया जाएगा Remot3d - एक उपकरण जो सर्वर को नियंत्रित और शोषण करने के लिए बैकडोर उत्पन्न करता है, जहाँ सर्वर PHP हाइपरटेक्स्ट प्रीप्रोसेसर प्रोग्राम चलाता है। एक बैकडोर से सुसज्जित जिसे अस्पष्ट obfuscated किया गया है, जिसका अर्थ है कि यह सामान्यतः...

cve-2019-1108

استغلال CVE-2019-1108 CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory...

CVE-2024-9570_D-Link-DIR-619L-bof

CVE-2024-9570D-Link-DIR-619L-bof استغلال لثغرة CVE-2024-9570 تم العثور على ثغرة أمنية في D-Link DIR-619L B1 2.06 وتم تصنيفها على أنها حرجة. الدالة formEasySetTimezone في الملف /goform/formEasySetTimezone هي المتأثرة بهذه المشكلة. يؤدي التلاعب بالوسيط curTime إلى تجاوز سعة المخزن المؤقت. يمكن شن...

iboss Secure Web Gateway - Stored Cross-Site Scripting

A cross-site scripting vulnerability has been found in iboss Secure Web Gateway up to version 10.1. The vulnerability affects the /login file of the Login Portal component, where manipulation of the redirectUrl parameter leads to cross-site scripting. The attack can be launched remotely and the...

Dahua EIMS - Unauthenticated Remote Code Execution via capture_handle

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capturehandle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without...

TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747B20191224. This vulnerability affects an unknown part of the file /webcste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely...

HPE Edgeline Infrastructure Manager <1.22 - Authentication Bypass

HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22 contains an authentication bypass vulnerability which could be remotely exploited to bypass remote authentication and possibly lead to execution of arbitrary commands, gaining...

MKdocs 1.2.2 - Directory Traversal

The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability see references because the dev server must be used in an unsafe way namely public to have this...