Nortek Linear eMerge E3 (CVE-2024-9441), which is vulnerable to Remote Code Execution (RCE) in a pre-authentication state. The vulnerability is triggered via a flaw in the password recovery feature, which allows an attacker to inject malicious PHP code into the system, leading to arbitrary code execution. This PoC allows you to: Vulnerability Details:
Loading
All posts tagged in "Malicious-Scripts"
Zimbra, a widely used email and collaboration platform, recently released a critical security update addressing a severe vulnerability in its postjournal service. This vulnerability, identified as CVE-2024-45519, allows unauthenticated attackers to execute arbitrary commands on affected Zimbra installations. In this blog post, we delve into the nature of this vulnerability, our journey in analyzing the patch, and
Office URI Schemes Previously, a method for capturing NTLMv2 hashes over SMB using the Office URI Schemes was shared LINK. This is the inspiring point for me. If we look Office URI Schemes page, we can see that usage of https:// protocol within URI scheme. This situation indicates that http:// can also potentially be used. Capturing the NTLMv2 hash over HTTP is
NanoCore is an example of a RAT, which is a type of malware designed to provide an attacker with access to and control over an infected machine. Like most RATs, NanoCore provides a wide range of capabilities, including: NanoCore is one of the leading malware variants currently in operation. In fact, it was number ten
CVE-2024-7965 affects the V8 JavaScript engine used in Google Chrome. This zero-day vulnerability stems from a flawed implementation that allows attackers to exploit heap corruption through specially crafted HTML pages. With a CVSS score of 8.8, it poses a serious threat to the confidentiality and integrity of affected systems. First discovered by the security researcher known as
An attacker with authenticated access to VICIdial as an “agent” can execute arbitrary shell commands as the “root” user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective. This repository contains a combined exploit for two critical vulnerabilities discovered in VICIdial by KoreLogic: These vulnerabilities allow an attacker to retrieve
CVE-2024-7029 highlights a severe security issue in AVTech devices, where attackers can bypass authentication and execute arbitrary commands remotely. This vulnerability poses significant risks to the integrity and security of affected networks. 💀 Vulnerability OverviewCVE-2024-7029 is a critical security flaw in AVTech devices that allows unauthorized access through authentication bypass, potentially leading to remote code
623📱 Compatible with all devices🔓 Bypass Play Store Signature📦 The bypass does not depend on APK files outside the Play Store🛡 100% FUD APK file💸 Money back guarantee if the bypass doesn’t work🔒 No screen permissions required🚫 No permission requests when installing APKs on your device
Fully automated exploit for CVE-2024-25641. When a user is authenticated, Cacti version 1.2.26 is vulnerable to an arbitrary file write vulnerability, exploitable through the “Package Import” feature, allows authenticated users having the “Import Templates” permission to execute arbitrary PHP code on the web server (RCE). Cacti provides an operational monitoring and fault management framework. Prior
CVE-2024-38793-PoC Proof of Concept code for exploitation of CVE-2024-38793 (Best Restaurant Menu by PriceListo <= 1.4.1 – Authenticated (Contributor+) SQL Injection). This is a proof of concept exploit for the vulnerability CVE-2024-38793, an SQL injection vulnerability for versions of the WordPress plugin Best Restaurant Menu a.k.a Great Restaurant Menu WP before 1.4.2. The vulnerability occurs because of a
A new Edge stealer v4.0 incorporates with various functionalities, it’s private stub, developed from scratch in C/Golang,. These include capturing screenshots of the desktop, stealing wallets from platforms like Atomic, Exodus, and MetaMask, extracting passwords from all major browsers, acquiring cookies from Chrome and Firefox, gathering browser history and downloaded files, retrieving Task Scheduler lists,
A PoC Exploit for CVE-2024-3105 – The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress Remote Code Execution (RCE) The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.5.0 via the ‘insert_php’
Incorrect Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met (such as when the screen definitions don’t explicitly check user’s permissions because they rely
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Affected versions from Win server 2000 to Win server 2025 A hole in the Windows Remote Desktop Licensing (RDL) service, 170,000 such hosts are currently exposed on the Internet.Patched in July PoC exploit released for critical 0-click remote code execution (RCE) vulnerability affecting Windows Server. This
A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM) and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Android malware (.apk) can be spread through a fake PDF document by manipulating the file extension in the WhatsApp application. Step 1: First, create a free account at https://user.ultramsg.com/signup.php. We will use this to manage the API Step 2: Click the “Add Instance” button and create a new instance. Step 3: Fill in the appropriate fields
296Azorult Stealer is a type of malware, specifically an information stealer, designed to gather sensitive information from infected computers. It targets a variety of data, including: Login credentials (usernames and passwords)Banking informationCryptocurrency walletsBrowser historyCookiesStored form autofill dataFiles from the infected machineAzorult is often distributed via phishing emails, malicious advertisements, or bundled with other software. Once
CVE-2024-41110 docker AuthZ exploit – get all docker containers on target Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is
An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr. How to Use Minimum Requirements Single Target: python CVE-2024-40348.py -u http://target:7809 -p /etc/passwd
CVE-2024-40725 Description: CVE-2024-40725 is a high-severity vulnerability found in Apache HTTP Server versions 2.4.0 to 2.4.61. This vulnerability affects the mod_proxy module. When the ProxyPass directive is enabled and URL rewrite rules are configured, an attacker can exploit this vulnerability to perform HTTP Request Smuggling attacks. This type of attack exploits discrepancies in the parsing
Subscribe & Follow
