bugstropics

在热带地区猎捕漏洞 这是我在 DEFCON30 上所做的演讲「在热带地区猎捕漏洞」所使用的幻灯片仓库。其中包含一个 Python 脚本，用于根据破解 Aruba 支持部门 EC 公钥（因其强度过弱，仅为 64 位）所获得的私钥来计算支持密码。这使你可以从这些设备上的子 shell 中逃逸出来，并获得完整的 root shell。 你可以通过在 AP CLI 上运行 support 并提供任意用户名来使用它： root@kitploit: support Username Please enter with @domain.com, in lowercase: a Token:...

EUVD-2018-9940

Malware in sbrugna...

CVE-2022-45291

CVE-2022-45291 affects the PWS Personal Weather Station Dashboard (PWS_Dashboard) LTS 2012_lts. The vulnerability enables remote code execution by injecting PHP into settings.php, with exploitation paths including PWS_printfile.php, PWS_frame_text.php, PWS_listfile.php, PWS_winter.php, and PWS_ea...

CVE-2018-18202

The QLogic 4Gb Fibre Channel 5.5.2.6.0 and 4/8Gb SAN 7.10.1.20.0 modules for IBM BladeCenter have an undocumented support account with a support password, an undocumented diags account with a diags password, and an undocumented prom account with a prom password...

Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit

No description provided by source...