626 matches found
CVE-2022-43110
CVE-2022-43110 अधिक जानकारी Voltronic Viewpower/Pro और रीब्रांड/व्युत्पन्न UPS प्रबंधन सॉफ़्टवेयर को केवल एक उचित रूप से प्रमाणित और अधिकृत एडमिन उपयोगकर्ता को वेब इंटरफ़ेस के माध्यम से सिस्टम को कॉन्फ़िगर करने की अनुमति देनी चाहिए। CWE-425: Direct Request 'Forced Browsing' के कारण, एक अनधिकृत,...
CVE-2022-31491
CVE-2022-31491 इस रिपॉजिटरी में Metasploit मॉड्यूल और PoC फ़ाइलें हैं। आगे की जानकारी Voltronic Viewpower/Pro और रीब्रांड/डेरिवेटिव्स UPS प्रबंधन सॉफ़्टवेयर सामान्यतः एक उचित रूप से प्रमाणित और अधिकृत उपयोगकर्ता को वेब इंटरफ़ेस के माध्यम से सिस्टम को कॉन्फ़िगर करने की अनुमति देता है ताकि जब...
ForceAdmin
💪 ForceAdmin 💪 ForceAdmin è un generatore di payload in C che crea infiniti pop-up UAC finché l'utente non consente l'esecuzione del programma. I comandi inseriti vengono eseguiti tramite PowerShell chiamando cmd.exe e dovrebbero usare la sintassi batch. Questo attacco li costringe a eseguire com...
CTF-Write-ups
CTF-Write-ups Einige CTF-Write-ups Folge uns auf...
Thunderstorm
Thunderstorm Thunderstorm ist ein modulares Framework zur Ausnutzung von USV-Geräten. Für den Moment sind nur die Exploits für CS-141 und NetMan 204 verfügbar. Die Betaversion des Frameworks wird in Zukunft veröffentlicht. CVE Thunderstorm ist derzeit in der Lage, die folgenden CVE auszunutzen:...
CVEs
CVEs Questo repository contiene vulnerabilità pubbliche divulgate durante le mie attività di ricerca sulla sicurezza. Note Il repository può includere: Resoconti tecnici Dettagli sulle vulnerabilità Riferimenti Analisi di sicurezza Ricerche aggiuntive correlate alle divulgazioni pubblicate...
Malware-Analysis
Analisi dei Malware Un repository per organizzare i miei write-up sui malware che sono troppo lunghi o che semplicemente non funzionano come thread su Twitter...
VulnerabilityResearch
Repository für Schwachstellenforschung Übersicht Willkommen in meinem Repository für Schwachstellenforschung. Dieser Bereich ist der Dokumentation und dem Teilen meiner Forschung zu verschiedenen Sicherheitslücken gewidmet, die im Laufe der Jahre entdeckt wurden. Das Repository enthält detaillier...
Eaton-UPS-Companion-Exploit
Übersicht Die Eaton UPS Companion Software überprüft jede Woche auf ein Update über eine unsichere HTTP-Verbindung und führt eval auf den Inhalt der Update-URL aus. Dadurch kann ein Angreifer eine JavaScript-Funktion erstellen, die die bereits in der Backend-Software vorhandenen...
vulnerability-write-ups
Dieses Repository hat keine README-Datei...
Pentest-Everything
⚔️ Pentest Tutto Importante Aggiungi questa pagina ai segnalibri poiché gli altri collegamenti alle pagine potrebbero cambiare o spostarsi nel tempo. Questa pagina rimarrà sempre la stessa. Informazioni su questo libro Questo libro è la mia raccolta di appunti e write-up su vari argomenti e...
metasploitable2-pentest-series
Metasploitable2 Penetration Testing Series A series of vulner...
CVE-2026-54161
upsmon: remote OS command injection RCE via attacker-controlled ups.alarm in NOTIFYCMD execution...
PT-2026-56558
Name of the Vulnerable Software and Affected Versions Network UPS Tools affected versions not specified Description A remote OS command injection allows an attacker to execute arbitrary commands as root. This occurs when upsmon executes the NOTIFYCMD using an attacker-controlled ups.alarm variabl...
EUVD-2026-40166
ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module's GET /admin-api/crm/follow-up-record/get endpoint that allows authenticated users to read any follow-up record by iterating sequential numeric IDs. Attackers can exploit this ...
Linux Distros Unpatched Vulnerability : CVE-2026-39199
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file. CVE-2026-39199 Note that Nessus relies on the presence of the package a...
CVE-2026-39199
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file...
DEBIAN-CVE-2026-39199
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file...