Python Scriptable Reverse Engineering Sandbox: PyREBox

PyREBox is a Python scriptable Reverse Engineering sandbox. It is based on QEMU, and its goal is to aid reverse engineering by providing dynamic analysis and debugging capabilities from a different perspective. PyREBox allows to inspect a running QEMU VM, modify its memory or registers, and to...

D-Link DSL-6850U Multiple Vulnerabilities

D-Link DSL-6850U routers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:dlink";...

CVE-2017-11321

The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command...

CVE-2017-11321: Improper Neutralization of Special Elements used in an OS Command

The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command...

CVE-2017-11321

The CVE-2017-11321 issue affects UCOPIA Wireless Appliance (pre-5.1.8) where the restricted shell interface allows remote authenticated users to escalate to admin privileges by exploiting shell metacharacters in the less command. Affected component: restricted shell via less; root cause: improper...

CVE-2017-11321

The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command...

PyREBox - Python scriptable Reverse Engineering Sandbox

PyREBox is a Python scriptable Reverse Engineering sandbox. It is based on QEMU, and its goal is to aid reverse engineering by providing dynamic analysis and debugging capabilities from a different perspective. PyREBox allows to inspect a running QEMU VM, modify its memory or registers, and to...

Oracle knowledge management system XXE vulnerability analysis: can lead to RCE-vulnerability warning-the black bar safety net

A vulnerability summary This article on the Oracle knowledge management system 8. 5. 1 announcements content analysis. Oracle's InQuira knowledge management products with the various sources of search technology, provides users with easy and convenient access to knowledge method, the knowledge of...

Apache .htaccess Persistence

This module writes a persistence payload into an Apache .htaccess file using modcgi. The .htaccess file itself acts as a CGI shell, executing commands passed via the query string. Inspired by the htshells project by wireghoul. Module Options msf use exploit/linux/persistence/apache/htaccess msf...