621 matches found
Mitel VoIP Bug Exploited in Ransomware Attacks
Ransomware groups are abusing unpatched versions of a Linux-based Mitel VoIP Voice over Internet Protocol application and using it as a springboard plant malware on targeted systems. The critical remote code execution RCE flaw, tracked as CVE-2022-29499, was first report by Crowdstrike in April a...
Exploit for OS Command Injection in Telesquare Sdt-Cs3B1_Firmware
Telesquare SDT-CW3B1 1.1.0 - OS Command Injection CVE-2021-4642...
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
F5-CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022...
Algo 8028 Control Panel - Remote Code Execution (Authenticated) Exploit
Exploit Title: Algo 8028 Control Panel - Remote Code Execution RCE Authenticated Google Dork: intitle:"Algo 8028 Control Panel" Shodan: title:"Algo 8028 Control Panel" Exploit Author: Filip Carlsson Vendor Homepage: https://www.algosolutions.com/ Software Link:...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 - Confluence Pre-Auth Remote Code Execution...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
exploitCVE-2022-26134 CVE-2022-26134, an OGNL injection vulne...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 1 First run the shodan scripts to grabs all t...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 PoC VMware Workspace ONE Access and Identity M...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 PoC VMware Workspace ONE Access and Identity M...
Zyxel USG FLEX 5.21 - OS Command Injection Exploit
Exploit Title: Zyxel USG FLEX 5.21 - OS Command Injection Shodan Dork: title:"USG FLEX 100" title:"USG FLEX 100W" title:"USG FLEX 200" title:"USG FLEX 500" title:"USG FLEX 700" title:"USG20-VPN" title:"USG20W-VPN" title:"ATP 100" title:"ATP 200" title:"ATP 500" title:"ATP 700" title:"ATP 800"...
Exploit for Improper Privilege Management in Kramerav Viaware
CVE-2021-36356 and CVE-2021-35064 PoC Usage: bash...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 PoC VMware Workspace ONE Access and Identity M...
Exploit for Path Traversal in Wso2 Api_Manager
WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-2...
The Fault in Our kubelets: Analyzing the Security of Publicly Exposed Kubernetes Clusters
While researching cloud-native tools, our Shodan scan revealed over 200,000 publicly exposed Kubernetes clusters and kubelet ports that can be abused by criminals...
The Fault in Our Kubelets: Analyzing the Security of Publicly Exposed Kubernetes Clusters
While researching cloud-native tools, our Shodan scan revealed over 200,000 publicly exposed Kubernetes clusters and kubelet ports that can be abused by criminals...
Exploit for Insecure Default Initialization of Resource in Apache Couchdb
Apache CouchDB 3.2.1 - Remote Code Execution RCE CVE-2022-24...
CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection
Rapid7 discovered and reported a vulnerability that affects Zyxel firewalls supporting Zero Touch Provisioning ZTP, which includes the ATP series, VPN series, and the USG FLEX series including USG20-VPN and USG20W-VPN. The vulnerability, identified as CVE-2022-30525, allows an unauthenticated and...
Apache CouchDB 3.2.1 - Remote Code Execution Exploit
Exploit Title: Apache CouchDB 3.2.1 - Remote Code Execution RCE Exploit Author: Konstantin Burov, @sadshade Software Link: https://couchdb.apache.org/ Version: 3.2.1 and below Tested on: Kali 2021.2 Based on 1F98D's Erlang Cookie - Remote Code Execution Shodan: port:4369 "name couchdb at" CVE:...