3517 matches found
New ShellBot DDoS Malware Variants Targeting Poorly Managed Linux Servers
Poorly managed Linux SSH servers are being targeted as part of a new campaign that deploys different variants of a malware called ShellBot. "ShellBot, also known as PerlBot, is a DDoS Bot malware developed in Perl and characteristically uses IRC protocol to communicate with the C&C server," AhnLa...
Exploit for Out-of-bounds Write in Fortinet Fortios
FortiOS SSL-VPN buffer overflow vulnerability cve-2022-424...
Exploit for CVE-2022-30190
FOLLINA-CVE-2022-30190 Implementation of FOLLINA-CVE-2022-3019...
Exploit for Code Injection in Vmware Spring_Cloud_Function
CVE-2022-22963 Spring Cloud Function SpleRCE Spring Cl...
ASUS ASMB8 iKVM 1.14.51 SNMP Remote Root Vulnerability
ASUS ASMB8 iKVM firmware versions 1.14.51 and below suffers from a flaw where SNMPv2 can be used with write access to introduce arbitrary extensions to achieve remote code execution as root. The researchers also discovered a hardcoded administrative account...
Exploit for External Control of File Name or Path in Fortinet Fortinac
FortiNAC CVE-2022-39952 PoC for CVE-2022-39952 affecting F...
Exploit for Improper Authentication in Linux Linux_Kernel
CVE-2022-0492 Docker Breakout Checker and PoC Summary Exp...
Exploit for Files or Directories Accessible to External Parties in Dompdf_Project Dompdf
CVE-2022-41343 🐍 Python Exploit for CVE-2022-41343 Staged Rev...
Exploit for OS Command Injection in Control-Webpanel Webpanel
Docs Paper : https://docs.google.com/document/d/1rQ7e9i2AFzHbASf...
MSC-2023-11756
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...
Exploit for OS Command Injection in Exiftool_Project Exiftool
CVE-2022-23935 🐍 Python Exploit for CVE-2022-23935 Staged Rev...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell CVE-2021-44228: Brief Description Apache L...
Hackers Exploit Vulnerabilities in Sunlogin to Deploy Sliver C2 Framework
Threat actors are leveraging known flaws in Sunlogin software to deploy the Sliver command-and-control C2 framework for carrying out post-exploitation activities. The findings come from AhnLab Security Emergency response Center ASEC, which discovered that security vulnerabilities in Sunlogin, a...
MSC-2023-11622
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...
MSC-2023-14354
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...
Remote Code Execution in "Import Settings" feature
Description Due to Improper data validation in "Import Settings" feature, an authenticated attacker can send crafted settings with malicious payload inside "system.croncmdline" value. Step to reproduce Requirement: PHP code must be executed on attacker machine - Step 1: Attacker run web server an...
Exploit for Argument Injection in Atlassian Bitbucket
Atlassian-Bitbucket-Server-CVE-2022-36804 A critical command...
Exploit for Argument Injection in Atlassian Bitbucket
CVE-2022-36804: Pre-Auth RCE in Atlassian Bitbucket Server A c...
MSC-2023-10700
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...