AutoRDPwn v4.8 - The Shadow Attack Framework

AutoRDPwn is a script created in Powershell and designed to automate the Shadow attack on Microsoft Windows computers. This vulnerability allows a remote attacker to view his victim's desktop without his consent, and even control it on request. For its correct operation, it is necessary to comply...

OSIsoft PI Vision

1. EXECUTIVE SUMMARY CVSS v4.8 ATTENTION: Low skill level to exploit Vendor: OSIsoft Equipment: PI Vision Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read and modify the contents of the PI Vision web page and data...

CVE-2018-11465

Siemens SINUMERIK controllers (808D, 828D, 840D sl) running affected V4.x are vulnerable to CVE-2018-11465 via ioctl abuse that can cause out-of-bounds reads, arbitrary writes, or kernel-mode code execution. Affected: 808D v4.7/v4.8 (all before certain SPs), 828D v4.7 (all before v4.7 SP6 HF1), 8...

CVE-2018-11458

The CVE-2018-11458 issue affects Siemens SINUMERIK controllers (e.g., 828D v4.7, 840D sl v4.7/v4.8) where the integrated VNC server on port 5900/TCP can be exploited remotely to execute code with privileged permissions. Exploitation requires network access and is possible without user interaction...

Server side request forgery (ssrf)

I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...

CVE-2018-1000138

I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...

CVE-2018-1000124

I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE) vulnerability in importmetadata.php (line 154) via simplexml_load_string, enabling an attacker to read local files and perform SSRF. Exploitation is described as possible by posting XML in the form_import_textare...

Ninja Blog v4.8 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================== Ninja Blog v4.8 Multiple Vulnerabilities ======================================== ======================================================================================== | Title : Ninja Blog v4.8...

Ninja Blog 4.8 - Multiple Vulnerabilities

Ninja Blog 4.8 - Multiple Vulnerabilities ======================================================================================== | Title : Ninja Blog v4.8 Multiple Vulnerabilities | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Ninja Blog 4.8 - Multiple Vulnerabilities

======================================================================================== | Title : Ninja Blog v4.8 Multiple Vulnerabilities | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 2 | High...