OST-C2-Spec

Draft: Request for Discussion Abstract This document provides an overview of Version 1 of the OST C&C Specification. It is intended to provide a detailed description of messages and the fields within those messages. Introduction The motivation behind this specification is to provide a C&C messagi...

EUVD-2019-6519

Malware in sbrugna...

CVE-2019-15535

Tasking Manager before 3.4.0 allows SQL Injection via custom SQL...

CVE-2024-41108

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. The hostinfo page has missing/improper access control since only the host's mac address is required to obtain the configuration information. This data can only be retrieved if a task is pending on that...

Brutus - An Educational Exploitation Framework Shipped On A Modular And Highly Extensible Multi-Tasking And Multi-Processing Architecture

An educational exploitation framework shipped on a modular and highly extensible multi-tasking and multi-processing architecture. Brutus: an Introduction Looking for version 1? See the branches in this repository. Brutus is an educational exploitation framework written in Python. It automates pre...

Tasking Manager SQL Injection Vulnerability

Tasking Manager is a task management tool for coordinating volunteers and organizations from the OpenStreetMap team. A SQL injection vulnerability exists in Tasking Manager. The vulnerability stems from a lack of validation of externally entered SQL statements in the database-based application. A...

CVE-2019-15535

Tasking Manager before 3.4.0 allows SQL Injection via custom SQL...

CVE-2019-15535

Tasking Manager before 3.4.0 allows SQL Injection via custom SQL...

Sql injection

Tasking Manager before 3.4.0 allows SQL Injection via custom SQL...

CVE-2019-15535

Tasking Manager before 3.4.0 is vulnerable to SQL Injection via unvalidated external SQL statements in the database layer. Root cause: lack of input validation for SQL statements issued to the database. Impact: potential arbitrary SQL execution with access/modify capabilities as described by the ...

CVE-2019-15535

Tasking Manager before 3.4.0 allows SQL Injection via custom SQL...

CVE-2019-15535: Improper Neutralization of Special Elements used in an SQL Command

Tasking Manager before 3.4.0 allows SQL Injection via custom SQL...

Dracnmap v2.2 - Exploit Network and Gathering Information with Nmap

Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the...

Maru OS — Android ROM that Turns into Debian Linux When Connected to a PC

Good News for Linux Techno Freaks! Do you usually mess with your Android smartphone by trying out the continual ins and outs of various apps and custom ROMs? Then this news would be a perfect pick for you! What If, you can effectively carry a Linux computer in your pocket? Hereby introducing a ne...

Backdoor in Android for No-Permissions Reverse Shell

Backdoor in Android for No-Permissions Reverse Shell Security expert Thomas Cannon working at viaForensics as the Director of R&D has demonstrated a custom-developed app that installs a backdoor in Android smartphones – without requiring any permissions or exploiting any security holes. Thomas...

Android Application Allows Remote Access – No Permissions Required

Mobile security researchers at the firm Viaforensics say they have created a malicious mobile application that requires the phone user to grant no permissions during installation, but could give remote attackers the ability to install and execute malicious code on mobile devices running the Andro...

Security A Hidden Benefit of iOS 4.2 Update

Apple iPhone and iPad users are buzzing about the new features that come with the latest update to the company’s iOS mobile operating system. But the update also contains dozens of fixes for security holes that could have allowed attackers to compromise the popular devices using malicious PDF...