c-ares/ares_parse_reply_fuzzer: Null-dereference READ with empty stacktrace

Project: https://github.com/c-ares/c-ares.git Detailed report: https://oss-fuzz.com/testcase?key=5674462260756480 Project: c-ares Fuzzer: libFuzzerc-aresaresparsereplyfuzzer Fuzz target binary: aresparsereplyfuzzer Job Type: libfuzzerubsanc-ares Platform Id: linux Crash Type: Null-dereference REA...

Amazon Web Services IAM credential enumeration

Provided AWS credentials, this module will call the authenticated API of Amazon Web Services to list all IAM credentials associated with the account This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'aws-sdk-iam...

Exploit for CVE-2019-1040

PoC exploit for CVE-2019-1040, a vulnerability in the UltraRealy...

filmaffinity.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-861446 Security Researcher PauloChoupina Helped patch 76 vulnerabilities Received 2 Coordinated Disclosure badges Received 8 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting filmaffinity.com website...

SMBv2+ Client Detection

Binary data 700731.prm...

Linux/x86_64 - Bind (4444/TCP) Shell (/bin/sh) Shellcode (104 bytes)

;Title: Linux/x8664 - Bind 4444/TCP Shell /bin/sh 104 bytes ;Author: Aron Mihaljevic ;Architecture: Linux x8664 ;Shellcode Length: 104 bytes ;github = https://github.com/STARRBOY ;test shellcode = after you run the shellcode, open another terminal and run "netcat -vv 0.0.0.0 4444"...

onederclub.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-850430 Security Researcher CoderYounes Helped patch 1033 vulnerabilities Received 5 Coordinated Disclosure badges Received 8 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting onederclub.com website a...

Nvidia GeForce Experience Web Helper - Command Injection Exploit

Exploit for windows platform in category local exploits //Send request to local GFE server function submitRequestport,secret var xhr = new XMLHttpRequest; xhr.open"POST", "http://127.0.0.1:"+port+"/gfeupdate/autoGFEInstall/", true; xhr.setRequestHeader"Accept",...

Code injection

Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...

IBM Websphere Application Server - Network Deployment Untrusted Data Deserialization Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IBM Websphere Application Server Network Deployment Untrusted Data Deserialization Remote Code Execution', 'Description' = % This module exploits...

RHEL 7 : thunderbird (RHSA-2019:1309)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1309 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.7.0. Security Fixes: Mozilla:...

Schneider Electric Altivar ATV71HC13Y Variable Speed Drive

Binary data 764120.prm...

Schneider Electric Altivar ATV61HD55N4S337 Variable Speed Drive

Binary data 764044.prm...

Schneider Electric Altivar ATV71PU15N4Z Variable Speed Drive

Binary data 764288.prm...

Schneider Electric Altivar ATV61HU30N4S337 Variable Speed Drive

Binary data 764073.prm...

Schneider Electric Altivar ATV71HU22S6X Variable Speed Drive

Binary data 764244.prm...

Schneider Electric Altivar ATV61HC40Y387 Variable Speed Drive

Binary data 763980.prm...

Schneider Electric Altivar ATV71HD15N4S337 Variable Speed Drive

Binary data 764164.prm...

Schneider Electric Altivar ATV61HU75Y Variable Speed Drive

Binary data 764100.prm...

Microsoft Windows Remote Desktop BlueKeep Denial Of Service

import socket, sys, struct from OpenSSL import SSL from impacket.structure import Structure I'm not responsible for what you use this to accomplish and should only be used for education purposes Could clean these up since I don't even use them class TPKTStructure: commonHdr = 'Version','B=3',...