Lucene search
+L

7505 matches found

Packet Storm
Packet Storm
added 2021/03/08 12:0 a.m.322 views

Hotel And Lodge Management System 1.0 Shell Upload

Exploit Title: Hotel and Lodge Management System 1.0 - Remote Code Execution Unauthenticated Date: 07-03-2021 Exploit Author: Christian Vierschilling Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/13707/hotel-and-lodge-management-system.html...

7.4AI score
SaveExploits0
zdt
zdt
added 2021/03/08 12:0 a.m.18 views

Hotel and Lodge Management System 1.0 - Remote Code Execution (Unauthenticated) Exploit

Exploit Title: Hotel and Lodge Management System 1.0 - Remote Code Execution Unauthenticated Exploit Author: Christian Vierschilling Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/13707/hotel-and-lodge-management-system.html Version: 1.0 Tested o...

0.1AI score
SaveExploits0
Snyk
Snyk
added 2021/03/07 11:42 a.m.6 views

Malicious Package

Overview rcenodejs is a malicious package. It uses a preinstall script to execute a reverse shell. Remediation Avoid using all malicious instances of the rcenodejs package. Credit: Snyk Research...

10CVSS7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2021/03/07 11:30 a.m.54 views

packetStrider - A Network Packet Forensics Tool For SSH

packetStrider for SSH is a packet forensics tool that aims to provide valuable insight into the nature of SSH traffic, shining a light into the corners of SSH network traffic where golden nuggets of information previously lay in the dark. The problem that packet strider aims to help with AKA Why?...

6.6CVSS6.6AI score0.01533EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.24 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2021-1450)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.03849EPSS
SaveExploits0References2
ThreatPost
ThreatPost
added 2021/03/03 7:12 p.m.53 views

Malicious Code Bombs Target Amazon, Lyft, Slack, Zillow

Researchers have spotted malicious packages targeting internal applications for Amazon, Lyft, Slack and Zillow among others inside the npm public code repository — all of which exfiltrate sensitive information. The packages weaponize a proof-of-concept PoC code dependency-confusion exploit that w...

7.2AI score
SaveExploits0References6
Gitee
Gitee
added 2021/03/03 1:35 p.m.9 views

vxhunter

This is an offensive tool for embedded device analysis. It is a toolset for VxWorks based embedded device analyses, specifically designed for analyzing VxWorks firmware. The toolset includes plugins written in Python for analyzing firmware loading address, fixing function names with symbol tables...

7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2021/03/03 12:0 a.m.414 views

AnyDesk 5.5.2 - Remote Code Execution

Exploit Title: AnyDesk 5.5.2 - Remote Code Execution Date: 09/06/20 Exploit Author: scryh Vendor Homepage: https://anydesk.com/en Version: 5.5.2 Tested on: Linux Walkthrough: https://devel0pment.de/?p=1881 !/usr/bin/env python import struct import socket import sys ip = '192.168.x.x' port = 50001...

9.8CVSS7.6AI score0.80551EPSS
SaveExploits9
zdt
zdt
added 2021/03/03 12:0 a.m.1709 views

AnyDesk 5.5.2 - Remote Code Execution Exploit

Exploit Title: AnyDesk 5.5.2 - Remote Code Execution Exploit Author: scryh Vendor Homepage: https://anydesk.com/en Version: 5.5.2 Tested on: Linux Walkthrough: https://devel0pment.de/?p=1881 !/usr/bin/env python import struct import socket import sys ip = '192.168.x.x' port = 50001 def...

9.8CVSS9.6AI score0.80551EPSS
SaveExploits9
Gitee
Gitee
added 2021/03/02 10:7 p.m.5 views

nightmare

This repository is an open-source project for teaching binary exploitation and reverse engineering skills through a series of challenges. It is a collection of CTF Capture The Flag challenges designed to help learners develop their skills in exploiting binaries and reversing assembly code. The...

7.1AI score
SaveExploits0
Kitploit
Kitploit
added 2021/02/26 11:30 a.m.50 views

OpenWifiPass - An Open Source Implementation Of Apple's Wi-Fi Password Sharing Protocol In Python

An open source implementation of the grantor role in Apple's Wi-Fi Password Sharing protocol. Disclaimer OpenWifiPass is experimental software and is the result of reverse engineering efforts by the Open Wireless Link project. The code serves solely documentary and educational purposes. It is...

6.8AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/02/25 12:0 a.m.18 views

Fedora: Security Advisory for radare2 (FEDORA-2021-e3c95619c1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.6AI score
SaveExploits0References2
Fedora
Fedora
added 2021/02/24 8:47 p.m.76 views

[SECURITY] Fedora 32 Update: radare2-5.1.1-1.fc32

The radare2 is a reverse-engineering framework that is multi-architecture, multi-platform, and highly scriptable. Radare2 provides a hexadecimal editor, wrapped I/O, file system support, debugger support, diffing between two functions or binaries, and code analysis at opcode, basic block, and...

7.5CVSS0.4AI score0.01834EPSS
SaveExploits2
Kitploit
Kitploit
added 2021/02/21 11:30 a.m.119 views

PE-Packer - A Simple Windows X86 PE File Packer Written In C And Microsoft Assembly

PE-Packer is a simple packer for Windows PE files. The new PE file after packing can obstruct the process of reverse engineering. It will do the following things when packing a PE file: Transforming the original import table. Encrypting sections. Clearing section names. Installing the shell-entry...

7.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2021/02/18 11:30 a.m.576 views

Ghidra_Kernelcache - A Ghidra Framework For iOS Kernelcache Reverse Engineering

This framework is the end product of my experience in reverse engineering iOS kernelcache,I do manually look for vulnerabilities in the kernel and have automated most of the things I really wanted to see in Ghidra to speed up the process of reversing, and this proven to be effective and saves a l...

6.8AI score
SaveExploits0References12
Exploit DB
Exploit DB
added 2021/02/18 12:0 a.m.301 views

Apport 2.20 - Local Privilege Escalation

Exploit Title: Apport 2.20 - Local Privilege Escalation Date: 18/02/21 Exploit Author: Gr33nh4t Vendor Homepage: https://ubuntu.com/ Version: Apport: Ubuntu 20.10 - Before 2.20.11-0ubuntu50.5 Apport: Ubuntu 20.04 - Before 2.20.11-0ubuntu27.16 Apport: Ubuntu 18.04 - Before 2.20.9-0ubuntu7.23 Appor...

5.3AI score
SaveExploits0
zdt
zdt
added 2021/02/18 12:0 a.m.54 views

Apport 2.20 - Local Privilege Escalation Exploit

Exploit Title: Apport 2.20 - Local Privilege Escalation Exploit Author: Gr33nh4t Vendor Homepage: https://ubuntu.com/ Version: Apport: Ubuntu 20.10 - Before 2.20.11-0ubuntu50.5 Apport: Ubuntu 20.04 - Before 2.20.11-0ubuntu27.16 Apport: Ubuntu 18.04 - Before 2.20.9-0ubuntu7.23 Apport: Ubuntu 16.04...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/02/18 12:0 a.m.252 views

Apport 2.20 Privilege Escalation

Exploit Title: Apport 2.20 - Local Privilege Escalation Date: 18/02/21 Exploit Author: Gr33nh4t Vendor Homepage: https://ubuntu.com/ Version: Apport: Ubuntu 20.10 - Before 2.20.11-0ubuntu50.5 Apport: Ubuntu 20.04 - Before 2.20.11-0ubuntu27.16 Apport: Ubuntu 18.04 - Before 2.20.9-0ubuntu7.23 Appor...

0.4AI score
SaveExploits0
OSV
OSV
added 2021/02/15 9:15 p.m.8 views

CVE-2021-3239

E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to execute arbitrary code on the hosting web server and gain a reverse shell...

9.8CVSS7.7AI score0.18393EPSS
SaveExploits1References5
NVD
NVD
added 2021/02/15 9:15 p.m.18 views

CVE-2021-3239

E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to execute arbitrary code on the hosting web server and gain a reverse shell...

9.8CVSS0.18393EPSS
SaveExploits1References5
Rows per page
Query Builder