novahot

novahot novahot는 침투 테스터를 위한 웹쉘 프레임워크입니다. JSON 기반 API를 구현하여 모든 언어로 작성된 트로이 목마와 통신할 수 있습니다. 기본적으로 PHP, ruby, python으로 작성된 트로이 목마가 포함되어 있습니다. 시스템 명령어 실행 외에도 novahot는 mysql, sqlite3, psql을 포함한 대화형 터미널을 에뮬레이션할 수 있습니다. 또한 선호하는 애플리케이션을 사용하여 원격 파일을 로컬에서 업로드, 다운로드, 편집, 보기 위한 "가상 명령어"를 구현합니다. 설치 npm에서 직접 실...

EUVD-2005-0869

Malware in sbrugna...

EUVD-2023-44813

Malicious code in bioql PyPI...

Arsenal - Just A Quick Inventory And Launcher For Hacking Programs

Arsenal is just a quick inventory, reminder and launcher for pentest commands. This project written by pentesters for pentesters simplify the use of all the hard-to-remember commands In arsenal you can search for a command, select one and it's prefilled directly in your terminal. This functionali...

CVE-2023-40216

OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences...

CVE-2023-40216

OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences...

CVE-2023-40216

OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences...

Out-of-bounds

OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences...

CVE-2023-40216

CVE-2023-40216 concerns OpenBSD 7.3 before errata 014, where the console terminal emulation (wscons) lacks an argument-count bounds check. This may permit out-of-bounds memory access and could trigger a kernel crash when processing crafted DCS or CSI terminal escape sequences. The issue is docume...

PT-2023-27333 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 7.3 before errata 014 Description: The issue is related to a missing argument-count bounds check in console terminal emulation, which could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI...

CVE-2023-40216: Missing Authorization

OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences...

CVE-2023-40216

OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI terminal escape sequences...

EvilOSX

This is a Python-based Remote Administration Tool RAT for macOS/OS X, known as EvilOSX. It is a modular system that allows users to extend its functionality by creating custom modules. The tool is designed to be undetectable by anti-virus software, using OpenSSL AES-256 encryption for its payload...

[SECURITY] [DSA 4861-1] screen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4861-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 21, 2021 https://www.debian.org/security/faq -...

Security Bulletin: Vulnerability in SSLv3 enabled in IBM Host On-Demand affects Rational Functional Tester (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM Rational Host On-Demand terminal that is bundled with Rational Functional Tester for terminal emulation. Vulnerability Details CVEID:...

[SECURITY] Fedora 25 Update: minicom-2.7.1-1.fc25

Minicom is a simple text-based modem control and terminal emulation program somewhat similar to MSDOS Telix. Minicom includes a dialing directory, full ANSI and VT100 emulation, an external scripting language, and other features...

[SECURITY] Fedora 24 Update: minicom-2.7.1-1.fc24

Minicom is a simple text-based modem control and terminal emulation program somewhat similar to MSDOS Telix. Minicom includes a dialing directory, full ANSI and VT100 emulation, an external scripting language, and other features...

[SECURITY] Fedora 25 Update: picocom-2.2-2.fc25

As its name suggests, picocom is a minimal dumb-terminal emulation program. It is, in principle, very much like minicom, only it's "pico" instead of "mini"! It was designed to serve as a simple, manual, modem configuration, testing, and debugging tool. It has also served quite well as a low-tech...

[SECURITY] Fedora 24 Update: picocom-2.2-2.fc24

As its name suggests, picocom is a minimal dumb-terminal emulation program. It is, in principle, very much like minicom, only it's "pico" instead of "mini"! It was designed to serve as a simple, manual, modem configuration, testing, and debugging tool. It has also served quite well as a low-tech...

Micro Focus Rumba+ 9.4 - Multiple Stack Buffer Overflow Vulnerabilities

Micro Focus Rumba+ 9.4 - Multiple Stack Buffer Overflow Vulnerabilities Micro Focus Rumba+ v9.4 Multiple Stack Buffer Overflow Vulnerabilities Vendor: Micro Focus Product web page: https://www.microfocus.com Affected version: 9.4.4058.0 and 9.4.0 SP0 Patch0 Affected products/tools : Rumba Desktop...