WebDrive 18.00.5057 - Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: WebDrive 18.00.5057 - Denial of Service PoC Discovery by: Victor Mondragón Vendor Homepage: https://webdrive.com/ Software Link: https://webdrive.com/download/ Tested Version: 18.00.5057 Tested on: Windows 10 Single Language x64...

WebDrive 18.00.5057 - Denial of Service (PoC)

WebDrive 18.00.5057 - Denial of Service PoC Exploit Title: WebDrive 18.00.5057 - Denial of Service PoC Discovery by: Victor Mondragón Discovery Date: 2018-10-31 Vendor Homepage: https://webdrive.com/ Software Link: https://webdrive.com/download/ Tested Version: 18.00.5057 Tested on: Windows 10...

WebDrive 18.00.5057 Denial Of Service

Exploit Title: WebDrive 18.00.5057 - Denial of Service PoC Discovery by: Victor MondragA3n Discovery Date: 2018-10-31 Vendor Homepage: https://webdrive.com/ Software Link: https://webdrive.com/download/ Tested Version: 18.00.5057 Tested on: Windows 10 Single Language x64 Steps to produce the cras...

QNAP NetBak Replicator 4.5.6.0607 - Denial of Service (PoC)

Exploit Title: QNAP NetBak Replicator 4.5.6.0607 Denial of Service PoC Date: 2018-10-29 Exploit Author: Yair Rodríguez Aparicio Vendor Homepage: https://www.qnap.com/en/ Software Link: https://www.qnap.com/en/download Version: 4.5.6.0607 Tested on: Windows XP Profesional Español SP3 x86 Steps to...

QNAP NetBak Replicator 4.5.6.0607 - Denial of Service (PoC)

QNAP NetBak Replicator 4.5.6.0607 - Denial of Service PoC Exploit Title: QNAP NetBak Replicator 4.5.6.0607 Denial of Service PoC Date: 2018-10-29 Exploit Author: Yair Rodríguez Aparicio Vendor Homepage: https://www.qnap.com/en/ Software Link: https://www.qnap.com/en/download Version: 4.5.6.0607...

September 26, 2018—KB4457136 (OS Build 16299.699)

None None...

September 26, 2018—KB4458469 (OS Build 17134.320)

None None...

The Offensive Web Application Penetration Testing Framework: TIDoS

TIDoS Framework is a comprehensive web-app audit framework. TIDoS is made to be comprehensive and versatile. It is a highly flexible framework where you just have to select and use modules. But before that, you need to set your own API KEYS for various OSINT purposes. To do so, open up APIKEYS.py...

CVE-2018-15137

CeLa Link CLR-M20 devices allow unauthorized users to upload any file e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml, which causes remote code execution as well. Because of the WebDAV feature, it is possible to upload arbitrary files by utilizing the PUT method...

CVE-2018-15137

CeLa Link CLR-M20 devices allow unauthorized users to upload any file e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml, which causes remote code execution as well. Because of the WebDAV feature, it is possible to upload arbitrary files by utilizing the PUT method...

Remote code execution

CeLa Link CLR-M20 devices allow unauthorized users to upload any file e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml, which causes remote code execution as well. Because of the WebDAV feature, it is possible to upload arbitrary files by utilizing the PUT method...

CVE-2018-15137

CeLa Link CLR-M20 devices are affected: unauthorized users can upload arbitrary files (asp, aspx, cfm, html, jhtml, jsp, shtml) via WebDAV PUT, enabling remote code execution. The issue is tied to the WebDAV upload capability, with CVSS metrics indicating a critical impact (CRITICAL, 9.8/10 in CV...

CVE-2018-15137

CeLa Link CLR-M20 devices allow unauthorized users to upload any file e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml, which causes remote code execution as well. Because of the WebDAV feature, it is possible to upload arbitrary files by utilizing the PUT method...

Serve DLL via webdav server

This module simplifies the rundll32.exe Application Whitelisting Bypass technique. The module creates a webdav server that hosts a dll file. When the user types the provided rundll32 command on a system, rundll32 will load the dll remotly and execute the provided export function. The export...

Cela Link CLR-M20 2.7.1.6 - Arbitrary File Upload

Cela Link CLR-M20 2.7.1.6 - Arbitrary File Upload Exploit Title: Cela Link CLR-M20 2.7.1.6 - Arbitrary File Upload Date: 2018-07-13 Shodan Dork: CLR-M20 Exploit Author: Safak Aslan Software Link: http://www.celalink.com Version: 2.7.1.6 CVE: 2018-15137 Authentication Required: No Tested on: Windo...

Cela Link CLR-M20 2.7.1.6 - Arbitrary File Upload

Exploit Title: Cela Link CLR-M20 2.7.1.6 - Arbitrary File Upload Date: 2018-07-13 Shodan Dork: CLR-M20 Exploit Author: Safak Aslan Software Link: http://www.celalink.com Version: 2.7.1.6 CVE: 2018-15137 Authentication Required: No Tested on: Windows Vulnerability Description Due to the Via WebDAV...

IceWarp Mail Server Cross-Site Script Injection Vulnerability

IceWarp Mail Server is a mail server product from IceWarp USA. The product supports email archiving, SmartAttach attachments, automatic migration and more. A cross-site scripting vulnerability exists in webdav/ticket/ URIs in IceWarp Mail Server version 12.0.3. A remote attacker can exploit this...

CVE-2018-7475

Cross-site scripting XSS vulnerability for webdav/ticket/ URIs in IceWarp Mail Server 12.0.3 allows remote attackers to inject arbitrary web script or HTML...

CVE-2018-7475

IceWarp Mail Server 12.0.3 is affected by a cross-site scripting (XSS) vulnerability in the webdav/ticket/ URIs. The issue, described in CVE-2018-7475, allows remote attackers to inject arbitrary web script or HTML. Public references confirm XSS in IceWarp Mail Server

Security Bulletin: Vulnerability in RC4 stream cipher affects Tivoli Storage Manager FastBack for Workstations (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects Tivoli Storage Manager FastBack for Workstations. The TSM FastBack for Workstations Central Administration Console CAC has a security vulnerability in the underlying IBM Webshpere and IBM WebSphere Liberty Server. Tivoli Storage Manager...