Malicious Package

sj-tw-abc is a malicious package that downloads and runs a script that opens a reverse shell in the system...

Malicious Package

sj-tw-sec is a malicious package that downloads and runs a script that opens a reverse shell in the system...

Malicious Package

sj-tw-test-security is a malicious package that downloads and runs a script that opens a reverse shell in the system...

Malicious Package

Overview All versions of sj-tw-abc contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer...

Malicious Package

Overview All versions of sj-tw-sec contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer...

Malicious Package

Overview All versions of sj-tw-test-security contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

Malicious Package

owl-orchard-apple-sunshine is a malicious package. The package downloads and runs a script that opens a reverse shell in the system, fully compromising the system...

Malicious Package

Overview All versions of owl-orchard-apple-sunshine contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored ...

Unix Command Shell, Reverse TCP (via jjs)

Connect back and create a command shell via jjs This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 863 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def...

Reverse Tabnabbing

showdown is vulnerable to reverse tabnabbing. The vulnerability exists due to a misconfiguration whereby the setting of rel="noopener noreferrer" is not set when openLinksInNewWindow is on...

Unspecified Vulnerability in JetBrains TeamCity

TeamCity is a Java-based build management and continuous integration server from JetBrains. A security vulnerability exists in versions of JetBrains TeamCity prior to 2019.1.4. An attacker can exploit the vulnerability to conduct a reverse tag phishing attack...

Reverse Tabnabbing

Overview Versions of showdown prior to 1.9.1 are vulnerable to Reverse Tabnabbing. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page when opening links. This is commonly used for phishing attacks. Recommendation Upgrade to version 1.9...

CVE-2019-18365

In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...

CVE-2019-18365

In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...

Design/Logic Flaw

In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...

CVE-2019-18365

In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...

CVE-2019-18365

CVE-2019-18365 affects JetBrains TeamCity prior to 2019.1.4. The connected documents describe a reverse tabnabbing issue on several pages, enabling tabnabbing/phishing-style risk when users follow links. Public details confirm the vulnerability description but do not disclose exploit code or prac...

CVE-2019-18365: Improper Privilege Management

In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...

CVE-2018-18931

An issue was discovered in the Tightrope Media Carousel digital signage product 7.0.4.104. Due to insecure default permissions on the C:\TRMS\Services directory, an attacker who has gained access to the system can elevate their privileges from a restricted account to full SYSTEM by replacing the...

AutoSploit v4.0 - Automated Mass Exploiter

As the name might suggest AutoSploit attempts to automate the exploitation of remote hosts. Targets can be collected automatically through Shodan, Censys or Zoomeye. But options to add your custom targets and host lists have been included as well. The available Metasploit modules have been select...