redis-post-exploitation

redis-post-exploitation For educational purposes only Reference https://2018.zeronights.ru/wp-content/uploads/materials/15-redis-post-exploitation.pdf https://paper.seebug.org/975/ Rogue Server https://github.com/knqyf263/redis-rogue-server Build $ docker-compose build Run $ docker-compose up -d ...

pulse-secure-vpn-mitm-research

pulse-secure-vpn-mitm-research Pulse Secure mitm research Release date Joint release date with vendor: 26 Oct 2020 Author David Kierznowski, @withdk Credits Sahil Mahajan from the Pulse Secure PSIRT Team for support throughout the disclosure process. Alyssa Herrera, Justin Wagner, and Mimir, and...

ZackAttack

===== ZackAttack! - Realying NTLM Like Nobody's Business ======= WTF Is This? tl;dr version - ZackAttack! is a new Tool Set to do NTLM Authentication relaying unlike any other tool currently out there. = So how is ZackAttack! different / better? Compared to other tools... Supports NTLMv2 : Brings...

CVE-2019-12086

Documentation CVE-2019-12086 jackson unserialize Vulnerability Exploitation 1. Start a malicious MySQL server: python roguemysqlserver.py 2. Check mysql.log in the same directory: tail -f mysql.log 3. Send the following JSON to the vulnerable application:...

CVE-2021-2378

creationtimestamp| type| source ---|---|--- 2026-09-01 17:00:45+00:00| seen| https://t.me/cissp/3872 2026-09-02 01:04:32+00:00| seen| https://t.me/cissp/3872 2026-09-11 00:00:07+00:00| seen| https://t.me/cissp/3872...

PT-2026-65502

Name of the Vulnerable Software and Affected Versions Appium Java Client versions 8.2.1 through 10.1.0 Description When directConnecttrue is enabled, the setDirectConnect function in AppiumCommandExecutor.java reads the directConnectHost, directConnectPort, and directConnectPath fields from the...

PYSEC-2026-1110 aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server

Summary The client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. Details It is possible to create a rogue MySQL server that emulates authorization, ignores client flags and requests arbitrary...

aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server

SummaryThe client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. DetailsIt is possible to create a rogue MySQL server that emulates authorization, ignores client flags and requests arbitrary...

CVE-2026-42511

The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the lease file is subsequently re-parsed by dhclient, e.g., after a system restart, an attacker-controlled field from the lease is passed to...

CVE-2026-42511

The dhclient(8) utility in FreeBSD is vulnerable to Remote Code Execution (RCE) due to insufficient validation of the BOOTP file field. The software fails to escape embedded double-quotes when writing to the lease file, allowing an attacker to inject arbitrary dhclient.conf directives. When the l...

redis_rogue_server

Redis Rogue Server A exploit for Redis 4.x and 5.x RCE, inspi...

Arbitrary Client-Side File Disclosure

aiomysql is vulnerable to Arbitrary Client-Side File Disclosure. The vulnerability is due to the client not validating server requests for local files, and attackers can exploit this by running a rogue MySQL server that sends LOADLOCAL packets to request and retrieve arbitrary files from the clie...

OESA-2025-2617 python-aiomysql security update

aiomysql is a "driver" for accessing a MySQL database from the asyncio PEP-3156/tulip framework. It depends on and reuses most parts of PyMySQL . aiomysql tries to be like awesome aiopg library and preserve same api, look and feel. Security Fixes: aiomysql is a library for accessing a MySQL...

OESA-2025-2619 python-aiomysql security update

aiomysql is a "driver" for accessing a MySQL database from the asyncio PEP-3156/tulip framework. It depends on and reuses most parts of PyMySQL . aiomysql tries to be like awesome aiopg library and preserve same api, look and feel. Security Fixes: aiomysql is a library for accessing a MySQL...

OESA-2025-2618 python-aiomysql security update

aiomysql is a "driver" for accessing a MySQL database from the asyncio PEP-3156/tulip framework. It depends on and reuses most parts of PyMySQL . aiomysql tries to be like awesome aiopg library and preserve same api, look and feel. Security Fixes: aiomysql is a library for accessing a MySQL...

OESA-2025-2616 python-aiomysql security update

aiomysql is a "driver" for accessing a MySQL database from the asyncio PEP-3156/tulip framework. It depends on and reuses most parts of PyMySQL . aiomysql tries to be like awesome aiopg library and preserve same api, look and feel. Security Fixes: aiomysql is a library for accessing a MySQL...

Linux Distros Unpatched Vulnerability : CVE-2025-62611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client- side settings are not checked before sending local...

CVE-2025-62611

aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. It is possible to create a rogue MySQL...

UBUNTU-CVE-2025-62611

aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. It is possible to create a rogue MySQL...

CVE-2025-62611

aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. It is possible to create a rogue MySQL...