CVE-2020-3452

CVE-2020-3452 Cisco Adaptive Security Appliance ASA & Cisco Firepower Threat Defense FTD Web Service Read-Only Directory Traversal Uma vulnerabilidade na interface de serviços web do Cisco Adaptive Security Appliance ASA Software e do Cisco Firepower Threat Defense FTD Software poderia permitir q...

CVE-2020-3452

CVE-2020-3452 Pequeno e estúpido validador Python? para CVE-2020-3452 em dispositivos CISCO. Primeira vez usando Python, por favor, não me mate. ;- USO root@kitploit: python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt AVISO LEGAL: Por favor, use este script apenas em alvos q...

CVE-2020-6308-PoC

CVE-2020-6308 SAP PoC SAP BusinessObjects Business Intelligence Platform Web Services versões - 410, 420, 430, permite que um atacante não autenticado injete valores arbitrários como parâmetros CMS para realizar consultas na rede interna que de outra forma não é acessível externamente. Siga-me no...

NtlmRelayToEWS

ntlmRelayToEWS Autor: Arno0x0x - @Arno0x0x ntlmRelayToEWS ist ein Werkzeug zur Durchführung von NTLM-Relay-Angriffen auf Exchange Web Services EWS. Es startet einen SMBListener auf Port 445 und einen HTTPListener auf Port 80 und wartet auf eingehende Verbindungen des Opfers. Sobald das Opfer eine...

suds

OVERVIEW "Suds" वेब सेवा क्लाइंट पायथन के लिए एक हल्का SOAP-आधारित क्लाइंट है, जो LGPL के तहत लाइसेंस प्राप्त है। विवरण के लिए, यहां जाएं: प्रोजेक्ट साइट: https://fedorahosted.org/suds/ दस्तावेज़ीकरण: https://fedorahosted.org/suds/wiki/Documentation एपीडॉक्स:...

CVE-2019-6340

Drupal Drupal 8.6.x RCE एक्सप्लॉइट एक्सप्लॉइट CVE: CVE-2019-6340 CMS: Drupal CMS संस्करण: Drupal 8.6.x पर परीक्षण किया गया शर्त: Drupal 8.6.x, 8.6.10 या Drupal 8.5.11 RESTful Web Services मॉड्यूल सक्षम है...

CISCO-CVE-2020-3452-Scanner-Exploiter

CISCO CVE-2020-3452 स्कैनर और शोषक यह shodan से लक्ष्य सर्वरों को स्कैन करेगा और फिर CVE-2020-3452 Cisco Adaptive Security Appliance और FTD अनधिकृत रिमोट फ़ाइल पढ़ना के लिए कमजोर सर्वरों को ढूंढेगा। परिचय Cisco Adaptive Security Appliance ASA सॉफ़्टवेयर और Cisco Firepower Threat Defense FTD...

WS-Attacker

WS-Attacker WS-Attacker वेब सेवाओं के पैनेट्रेशन टेस्टिंग के लिए एक मॉड्यूलर फ्रेमवर्क है। इसे नेटवर्क और डेटा सुरक्षा के चेयर, रूहर यूनिवर्सिटी बोचुम https://nds.rub.de/ और हैकमैनिट GmbH https://hackmanit.de/ द्वारा विकसित किया गया है। WS-Attacker के पीछे मूल विचार WSDL फ़ाइलों को लोड करने और वे...

poc_proxylogon

pocproxylogon PoC do Microsoft Exchange ProxyLogon CVE-2021-26855 Este script foi originalmente criado por celesian para explorar esta CVE. Depois, eu o atualizei para explorar um servidor Exchange vulnerável a SSRF, mas ele obtém uma shell explorando o recurso EWS, porque uma empresa cliente...

ASVS

OWASP एप्लिकेशन सुरक्षा सत्यापन मानक यह कार्य क्रिएटिव कॉमन्स एट्रिब्यूशन-शेयरअलाइक 4.0 इंटरनेशनल लाइसेंस के अंतर्गत लाइसेंस प्राप्त है। 🎉🎉🎉 ASVS के संस्करण 5.0 में आपका स्वागत है! 🎉🎉🎉 Global AppSec EU Barcelona 2025 में मंच पर लाइव जारी किया गया! परिचय OWASP एप्लिकेशन सुरक्षा सत्यापन मानक ASVS...

Drupal-SA-CORE-2019-003

Drupal-SA-CORE-2019-003 CVE-2019-6340 Drupal SA-CORE-2019-003 CVE-2019-6340 CVE-2019-6340.md https://mp.weixin.qq.com/s/EQD4-K6HgBY9wdzeXeyzkg https://paper.seebug.org/821/ https://www.youtube.com/watch?v=QtLDDN0Duko linkname https://pbs.twimg.com/media/D0C-KiXX4AM2vR3.jpg:large A CVE-2019-6340 n...

cve-2019-6340-bits

cve-2019-6340-bits Bits gerados durante a análise do CVE-2019-6340 Drupal RESTful RCE regra modsec pcap exemplo de configuração nginx exemplo de logs exemplo de playbook...

Drupal_REST-RCE_Unauthenticated

CVE-2019-6340 — Drupal RESTful Web Services RCE Python-Implementierung des Remote-Code-Ausführung-Exploits für CVE-2019-6340, basierend auf der Analyse des Metasploit-Moduls und der vorherigen Arbeit von leonjza. Hauptunterschied zu EDB-46459: verwendet POST anstelle von GET, umgeht Drupals...

Cisco-ASA-FTD-Web-Services-Traversal

ثغرة اجتياز المسار في واجهة خدمات الويب لبرنامج Cisco Adaptive Security Appliance وبرنامج Firepower Threat Defense CVE-2020-3452 الاستخدام: CVE-2020-3452.py https://target وصف الثغرة: توجد ثغرة في واجهة خدمات الويب لبرنامج Cisco Adaptive Security Appliance ASA وبرنامج Cisco Firepower Threat Defen...

Cisco ASA/FTD Software - Cross-Site Scripting

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are vulnerable to cross-site scripting and could allow an unauthenticated, remote attacker to conduct attacks against a user of the web services interface of an affected device. The vulnerabilities are...

SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery

SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...

Edito CMS - Sensitive Data Leak

Web services managed by Edito CMS Content Management System in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthorized user. id: CVE-2024-4836 info: name: Edito CMS - Sensitive Data Leak author: s4e-io severity: high description: | Web...

aws__aws-sdk-java_CVE-2022-31159_1-12-2600

AWS SDK para Java O AWS SDK para Java permite que desenvolvedores Java trabalhem facilmente com Amazon Web Services e construam soluções escaláveis com Amazon S3, Amazon DynamoDB, Amazon Glacier e muito mais. Consulte o AWS SDK para Java 2.x para saber como começar. Em Modo de Manutenção a partir...

asf__cxf_CVE-2019-17573_3-2-11

Bem-vindo ao Apache CXF! O Apache CXF é um framework de serviços de código aberto. O CXF ajuda você a construir e desenvolver serviços usando APIs de programação frontend, como JAX-WS e JAX-RS. Esses serviços podem falar uma variedade de protocolos, como SOAP, XML/HTTP, HTTP RESTful ou CORBA, e...

cleanldap

CleanLdap BOF zum Durchführen von verdeckten LDAP-Abfragen über AD WS Argumente Kommen wir direkt zum Punkt, hier sind die Argumente und ihre Bedeutung: root@kitploit: Z: DC Hostname "dc01.example.com" Z: LDAP query "objectClass=" Z: Comma separated list of LDAP attributes...