512 matches found
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware
CVE-2024-24919-POC Read about it - https://nvd.nist.gov/...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware
CVE-2024-24919 An Vulnerability detection and Exploitation too...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware
CVE-2024-24919 Checker A simple bash script to check for the...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware
Intro Simple POC Python script that check & leverage Check Poi...
Exploit for CVE-2024-29895
CVE-2024-29895 - RCE ON CACTI !WARNING This is an edu...
Exploit for CVE-2024-29895
PoC exploit for CVE-2024-29895 is not present in the provided co...
Exploit for CVE-2024-32640
Muraider - Automating the detection & Exploitation of CVE-2024...
A new alert system from CISA seems to be effective โ now we just need companies to sign up
One of the great cybersecurity challenges organizations currently face, especially smaller ones, is that they dont know what they dont know. Its tough to have your eyes on everything all the time, especially with so many pieces of software running and IoT devices extending the reach of networks...
CVE-2019-19752
nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build...
SimpleMiningOS ๅฎๅ จๆผๆด
SimpleMiningOS is a mining operating system open-sourced by SimpleMining Poland. A security vulnerability exists in SimpleMiningOS version v1259, which stems from the inclusion of SSH host keys in the installation image, allowing man-in-the-middle attacks and enabling Shodan.io to easily identify...
PT-2024-10725 ยท Easymine ยท Easymine
Name of the Vulnerable Software and Affected Versions: easyMINE versions prior to 2019-12-05 Description: The issue allows man-in-the-middle attacks due to SSH host keys being baked into the installation image. This makes it trivial to identify all public IPv4 nodes using Shodan.io...
PT-2024-10729 ยท Ethos ยท Ethos
Name of the Vulnerable Software and Affected Versions: ethOS versions 1.3.3 and earlier Description: The issue allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io, as the software ships with SSH host keys baked into the installation image. The...
Exploit for Code Injection in Crushftp
CVE-2024-4040 SSTI & LFI PoC - Exploitation | CrushFTP This...
C2-Tracker - Live Feed Of C2 Servers, Tools, And Botnets
Free to use IOC feed for various tools/malware. It started out for just C2 tools but has morphed into tracking infostealers and botnets as well. It uses shodan.io/"Shodan searches to collect the IPs. The most recent collection is always stored in data; the IPs are broken down by tool and there is...
Exploit for Improper Input Validation in Paloaltonetworks Pan-Os
CVE-2024-3400 CVE-2024-3400 Palo Alto File Write Exploit...
Researchers Discover LG Smart TV Vulnerabilities Allowing Root Access
Multiple security vulnerabilities have been disclosed in LG webOS running on its smart televisions that could be exploited to bypass authorization and gain root access on the devices. The findings come from Romanian cybersecurity firm Bitdefender, which discovered and reported the flaws in Novemb...
Shodan Dorks
Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...
Dorkish - Chrome Extension Tool For OSINT & Recon
During reconaissance phase or when doing OSINT , we often use google dorking and shodan and thus the idea of Dorkish. Dorkish is a Chrome extension tool that facilitates custom dork creation for Google and Shodan using the builder and it offers prebuilt dorks for efficient reconnaissance and OSIN...
Viessmann Vitogate 300 2.1.3.0 Remote Code Execution
Exploit Title: Viessmann Vitogate 300 = 2.1.3.0 - Remote Code Execution RCE - Shodan Dork: http.title:'Vitogate 300' - Exploit Author: ByteHunter - Email: [email protected] - Version: versions up to 2.1.3.0 - Tested on: 2.1.1.0 - CVE : CVE-2023-5702 & CVE-2023-5222 import argparse import...
Honeywell PM43 Remote Code Execution
Exploit Title: Honeywell PM43 ' if htmlstartindex != -1: return responsetext:htmlstartindex else: return responsetext except requests.exceptions.RequestException as e: return f"Error: e" def main: parser = argparse.ArgumentParserdescription='Command Injection PoC for Honeywell PM43 Printers'...