31 matches found
CVE-2022-2588
CVE-2022-2588 Code adapted for one cpu, and with a vagrant file provided to boot up a vulnerable machine used for educational purposes. To create a vulnerable machine, you need to have Vagrant installed on your machine, then execute on the repository root: Vagrant up Wait for installation and...
Kioptrix-Lvl1-Exploitation
No d...
PT-2026-53504
A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information...
EUVD-2023-3221
Malicious code in bioql PyPI...
KLA78026 ACE vulnerability in Microsoft Developer Tools
A remote code vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-49063 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2024-49063 high Solution Install necessary updates fro...
KLA74614 ACE vulnerability in Microsoft Azure
A remote code execution vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-0132 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Azure CVE list CVE-2024-0132 critic...
Sockso Music Host Server 1.5 Directory Traversal
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Sockso Music Host Server 1.5 Directory Traversal', 'Description' = %q This module exploits a directory traversal bug in Sockso on port 4444. This...
Exploit for Improper Privilege Management in Enlightenment
Description Taken from https://github.com/nu11secur1ty/CVE-mi...
Exploit for Heap-based Buffer Overflow in Gnu Glibc
GNU C Library's Dynamic Loader Vulnerability CVE-2023-4911...
GHSA-HH8P-P8MP-GQHM MLFlow Path Traversal Vulnerability
A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information...
CVE-2023-6975
A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information...
Command injection
A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information...
CVE-2023-6975 Path Traversal: '\..\filename'
A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information...
CVE-2023-6975 Path Traversal: '\..\filename'
A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information...
Exploit for Double Free in Linux Linux_Kernel
CVE-2022-2588 Code adapted for one cpu, and with a vagrant fil...
Yelp: RCE on build server via misconfigured pip install
The following Python library has been installed on at least one Yelp owned build server directly from the public PyPI registry. https://pypi.org/project/yelp-cgeom/ This package should normally be downloaded from the internal Yelp registry, but a misconfiguration appears to have caused it to be...
Machine is vulnerable to attacks after CPUSE clean install and before completing the First Time Wizard
...
Hack with Metasploit: Announcing the UNITED 2017 CTF
Got mad skillz? Want mad skillz? This year at Rapid7s annual UNITED Summit, were hosting a first-of-its-kind Capture the Flag CTF competition. Whether youre a noob to hacking or a grizzled pro, youll emerge from our 25-hour CTF with more knowledge and serious bragging rights. Show off your 1337...
ATCOM PBX Authentication Bypass
Title: ATCOM PBX system , auth bypass exploit Author: i-Hmx contact : [email protected] Home : sec4ever.com Tested on : ATCOM IP01 , IP08 , IP4G and ip2G4A Details The mentioned system is affected by auth bypass flaw that allow an attacker to get admin access on the vulnerable machine without...
Fusion SBX <= 1.2 - Remote Command Execution Exploit
No description provided by source. / Fusion SBX = 1.2 exploit sileFSBXxpl This exploit use vulnerability found into Fusion SBX and create new variable and call it with a malicious function stored in config.php. This exploit utilize injection of three diverse procedures for execution of arbitrary...