Lucene search
+L

1869 matches found

Positive Technologies
Positive Technologies
added 2022/01/18 12:0 a.m.4 views

PT-2022-1429 · Mcafee · Mcafee Agent

Name of the Vulnerable Software and Affected Versions: McAfee Agent for Windows versions prior to 5.7.5 Description: A command injection issue allows local users to inject arbitrary shell code into the file cleanup.exe. The malicious clean.exe file is placed into the relevant folder and executed ...

9.3CVSS8AI score0.01012EPSS
SaveExploits0References7
GithubExploit
GithubExploit
added 2022/01/04 2:48 p.m.542 views

Exploit for Unrestricted Upload of File with Dangerous Type in Embedthis Goahead

CVE-2021-42342 CVE-2021-42342 RCE POC1:just prints c in...

9.8CVSS9.7AI score0.5946EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2022/01/03 4:47 p.m.650 views

Exploit for OS Command Injection in Gerapy

CVE-2021-43857 Gerapy prior to version 0.9.8 is vulnerable to...

9.8CVSS9.4AI score0.55331EPSS
SaveExploits7
GithubExploit
GithubExploit
added 2021/12/24 1:18 p.m.567 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4jUnifi Exploiting CVE-2021-44228 in Unifi Network Applicat...

10CVSS9.6AI score0.99999EPSS
SaveExploits359
GithubExploit
GithubExploit
added 2021/12/24 9:26 a.m.756 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4j Simple Exploit A Proof-Of-Concept Exploit for CVE-202...

10CVSS9.1AI score0.99999EPSS
SaveExploits359
GithubExploit
GithubExploit
added 2021/12/22 8:2 a.m.22 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4PowerShell CVE-2021-44228 Proof of Concept A Proof-Of-C...

10CVSS8.6AI score0.99999EPSS
SaveExploits359
GithubExploit
GithubExploit
added 2021/12/19 2:48 p.m.686 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4jCenter Exploiting CVE-2021-44228 in vCenter for remote c...

10CVSS9.7AI score0.99999EPSS
SaveExploits359
GithubExploit
GithubExploit
added 2021/12/18 12:42 p.m.368 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Self-contained lab environment PoC that runs a reverse-shell w...

10CVSS9.3AI score0.99999EPSS
SaveExploits359
GithubExploit
GithubExploit
added 2021/12/16 11:13 p.m.389 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4shell4shell Log4j - Multitool. Find & fix possible CVE...

10CVSS9.3AI score0.99999EPSS
SaveExploits359
GithubExploit
GithubExploit
added 2021/12/14 9:32 p.m.337 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

POC for CVE-2021-44228 This python script was created while I...

10CVSS9.3AI score0.99999EPSS
SaveExploits359
GithubExploit
GithubExploit
added 2021/12/14 5:24 a.m.420 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4j2-CVE-2021-44228-revshell Usage For reverse...

10CVSS9.3AI score0.99999EPSS
SaveExploits359
Kitploit
Kitploit
added 2021/12/01 11:30 a.m.37 views

XC - A Small Reverse Shell For Linux And Windows

Netcat like reverse shell for Linux & Windows. Features Windows Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active forwards !rmfwd remove...

7.5AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/11/30 7:15 p.m.4 views

CVE-2021-43283

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

9CVSS7AI score0.04567EPSS
SaveExploits3References3
Prion
Prion
added 2021/11/30 7:15 p.m.13 views

Command injection

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

9CVSS8.8AI score0.04567EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
added 2021/11/30 6:22 p.m.23 views

CVE-2021-43283

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

9AI score0.04567EPSS
SaveExploits3References2
Packet Storm
Packet Storm
added 2021/11/30 12:0 a.m.353 views

Laundry Booking Management System 1.0 Remote Code Execution

Exploit Title: Laundry Booking Management System 1.0 - Remote Code Execution RCE Date: 29/11/2021 Exploit Author: Pablo Santiago Vendor Homepage: https://www.sourcecodester.com/php/14400/laundry-booking-management-system-php-source-code.html Software Link:...

0.5AI score
SaveExploits0
zdt
zdt
added 2021/11/30 12:0 a.m.529 views

Laundry Booking Management System 1.0 - Remote Code Execution Exploit

Exploit Title: Laundry Booking Management System 1.0 - Remote Code Execution RCE Exploit Author: Pablo Santiago Vendor Homepage: https://www.sourcecodester.com/php/14400/laundry-booking-management-system-php-source-code.html Software Link:...

SaveExploits0
CNNVD
CNNVD
added 2021/11/30 12:0 a.m.8 views

Victure WR1200 操作系统命令注入漏洞

The Victure WR1200 is a router. A security vulnerability exists in the Victure WR1200 1.0.3 and prior versions, which stems from a lack of command filtering and restriction in the device's web interface, resulting in a command injection vulnerability that could be exploited by an attacker to inje...

9CVSS7.3AI score0.04567EPSS
SaveExploits3References3
The Hacker News
The Hacker News
added 2021/11/19 1:14 p.m.23 views

11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells

Cybersecurity researchers have uncovered as many as 11 malicious Python packages that have been cumulatively downloaded more than 41,000 times from the Python Package Index PyPI repository, and could be exploited to steal Discord access tokens, passwords, and even stage dependency confusion...

7.4AI score
SaveExploits0
zdt
zdt
added 2021/11/17 12:0 a.m.793 views

GitLab 13.10.2 - Remote Code Execution Exploit

Exploit Title: GitLab 13.10.2 - Remote Code Execution RCE Unauthenticated Shodan Dork: https://www.shodan.io/search?query=title%3A%22GitLab%22+%2B%22Server%3A+nginx%22 Exploit Author: Jacob Baines Vendor Homepage: https://about.gitlab.com/ Software Link: https://gitlab.com/gitlab-org/gitlab...

10CVSS9AI score0.99982EPSS
SaveExploits57
Rows per page
Query Builder