11989 matches found
Clickable Endnotes to Click Here to Kill Everybody
In Click Here to Kill Everybody, I promised clickable endnotes. They're finally available...
SNMPc Enterprise Edition 9 / 10 Mapping Filename Buffer Overflow
!/usr/bin/python -- coding: utf-8 -- -------------------------------------------------------------------- Exploit: SNMPc Enterprise Edition 9 & 10 Mapping File Name BOF Date: 11 July 2019 Exploit Author: @xerubus | mogozobo.com Vendor Homepage: https://www.castlerock.com/ Software Linke:...
Siemens SCALANCE XR524-8C Managed IE Switch
Binary data 764613.prm...
Linux/ARM64 - Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (128 bytes)
/ Title: Linux/ARM64 - Reverse 127.0.0.1:4444/TCP Shell /bin/sh + Null-Free Shellcode 128 bytes Date: 2019-06-30 Tested: Ubuntu 16.04 aarch64 Author: Ken Kitahara Compilation: gcc -o loader loader.c ubuntu@ubuntu:/works$ lsbrelease -a No LSB modules are available. Distributor ID: Ubuntu...
FreeBSD -- iconv buffer overflow
Problem Description: With certain inputs, iconv may write beyond the end of the output buffer. Impact: Depending on the way in which iconv is used, an attacker may be able to create a denial of service, provoke incorrect program behavior, or induce a remote code execution. iconv is a libc library...
BlogEngine.NET 3.3.6/3.3.7 - (path) Directory Traversal Vulnerability
Exploit for asp platform in category web applications Exploit Title: Directory Traversal on BlogEngine.NET Date: 24 Jun 2019 Exploit Author: Aaron Bishop Vendor Homepage: https://blogengine.io/ Version: v3.3.7 Tested on: 3.3.7, 3.3.6 CVE : 2019-10717 1. Description ============== BlogEngine.NET i...
c-ares/ares_parse_reply_fuzzer: Null-dereference READ with empty stacktrace
Project: https://github.com/c-ares/c-ares.git Detailed report: https://oss-fuzz.com/testcase?key=5674462260756480 Project: c-ares Fuzzer: libFuzzerc-aresaresparsereplyfuzzer Fuzz target binary: aresparsereplyfuzzer Job Type: libfuzzerubsanc-ares Platform Id: linux Crash Type: Null-dereference REA...
Amazon Web Services IAM credential enumeration
Provided AWS credentials, this module will call the authenticated API of Amazon Web Services to list all IAM credentials associated with the account This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'aws-sdk-iam...
Exploit for CVE-2019-1040
PoC exploit for CVE-2019-1040, a vulnerability in the UltraRealy...
filmaffinity.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-861446 Security Researcher PauloChoupina Helped patch 76 vulnerabilities Received 2 Coordinated Disclosure badges Received 8 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting filmaffinity.com website...
SMBv2+ Client Detection
Binary data 700731.prm...
Linux/x86_64 - Bind (4444/TCP) Shell (/bin/sh) Shellcode (104 bytes)
;Title: Linux/x8664 - Bind 4444/TCP Shell /bin/sh 104 bytes ;Author: Aron Mihaljevic ;Architecture: Linux x8664 ;Shellcode Length: 104 bytes ;github = https://github.com/STARRBOY ;test shellcode = after you run the shellcode, open another terminal and run "netcat -vv 0.0.0.0 4444"...
onederclub.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-850430 Security Researcher CoderYounes Helped patch 1033 vulnerabilities Received 5 Coordinated Disclosure badges Received 8 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting onederclub.com website a...
Nvidia GeForce Experience Web Helper - Command Injection Exploit
Exploit for windows platform in category local exploits //Send request to local GFE server function submitRequestport,secret var xhr = new XMLHttpRequest; xhr.open"POST", "http://127.0.0.1:"+port+"/gfeupdate/autoGFEInstall/", true; xhr.setRequestHeader"Accept",...
Code injection
Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...
IBM Websphere Application Server - Network Deployment Untrusted Data Deserialization Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IBM Websphere Application Server Network Deployment Untrusted Data Deserialization Remote Code Execution', 'Description' = % This module exploits...
RHEL 7 : thunderbird (RHSA-2019:1309)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1309 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.7.0. Security Fixes: Mozilla:...
Schneider Electric Altivar ATV71HC13Y Variable Speed Drive
Binary data 764120.prm...