NecroWord — an easy way to embed a payload using undetect macros! 👩💻 What is it? 🤔 — In simple words – you can create an undetect infected .doc document ⚙️ How to use ? 🫱 Attention! — This is not a CVE | We condemn the use of software for illegal purposes. All responsibility
Loading
All posts tagged in "#pentesting-tools"
CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a “run-as any app” attack, leading to local escalation of privilege without requiring user interaction.The issue arises due to improper input validation within the createSessionInternal function. An attacker
Windows CSC Service Elevation of Privilege Vulnerability CWE-781: Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code in the csc.sys driver What is CVE-2024-26229? CVE-2024-26229 is a critical vulnerability identified in the Windows CSC service, which could allow for elevation of privilege (LPE). This means that an attacker could exploit this vulnerability to gain
226Acunetix Premium is a web application security solution for managing the security of multiple websites, web applications, and APIs. Integration features allow you to automate your DevOps and issue management infrastructures. Acunetix Premium: A Comprehensive Web Application Security Solution Web applications are crucial for businesses and organizations to connect with their customers, partners, and employees. As
Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated user to execute arbitrary command on the server when `register_argc_argv` option of PHP is `On`. In `cmd_realtime.php` line 119, the `$poller_id` used as part of the command execution is sourced from `$_SERVER`, which can
132Core Impact 21.5 is now live! New features include a new module for coerced authentications, the option to use this module with the new NTLMrelayx module featured by Impacket for Active Directory attacks, and a revamped version of the Core Impact Dashboard. We have also made significant improvements to support CVSS 3 and 3.1 scoring
Command Injection occurs when entering a value due to insufficient verification of the input value when registering a device PIN number that exists in the router’s Configure -> Wi-Fi -> Wi-Fi Protect Config setting. Command Injection is possible when the ping command is executed due to insufficient verification of the input value for the IP
Predator Crypter Simple Obfuscation Tool An obfuscation tool for .Net + Native files. Main Features Prerequisites To open project you need: 1- Visual Studio 2019+2022 2 – requires Guna UI
In the attacks observed so far, CVE-2024-27956 is being used to unauthorized database queries and create new admin accounts on susceptible WordPress sites (e.g., names starting with “xtw”), which could then be leveraged for follow-on post-exploitation actions. This includes installing plugins that make it possible to upload files or edit code, indicating attempts to repurpose
Note:This code needs to be developed, those who have the ability to develop the code can do this✍️✍️✍️✍️✔️ This code provides options for various processes related to managing and protecting APK files. When the user runs the program, they can choose one of the following operations:❤️ Encrypt APK:Task: This operation encrypts the APK file using
Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.
LayerSlider 7.9.11 – 7.10.0 – Unauthenticated SQL Injection The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL
This script is a powerful exploitation tool for the CVE-2024-3273 vulnerability found in specific versions of D-Link NAS devices. It enables command execution and unauthorized access to the affected devices. A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of
Guardio Labs discovered a vulnerability in Microsoft Edge, designated CVE-2024–21388. This flaw could have allowed an attacker to exploit a private API, initially intended for marketing purposes, to covertly install additional browser extensions with broad permissions without the user’s knowledge. The vulnerability was promptly disclosed to Microsoft, leading to a resolution in February 2024. https://labs.guard.io/cve-2024-21388-microsoft-edges-marketing-api-exploited-for-covert-extension-installation-879fe5ad35ca
123Invicti Professional Edition Full Activated Password: Pwn3rzs Some of the basic security tests should include testing: NEW FEATURES Added the ability to force authentication verifier agents to use incognito mode by default on Chromium browsers NEW SECURITY CHECKS Added detection for ActiveMQ RCE to the OOB RCE Attack Pattern (CVE-2023-46604) FIXES Added a Cookie Source
102Tools for analyzing UEFI firmware and checking UEFI modules with FwHunt rules. Dependencies rizin (v0.6.2) Installation Install with pip (tested on python3.6 and above): Install manually:
A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells. This
Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected versions, Solr ConfigSets accepted Java jar and class files to be uploaded through the ConfigSets API.
122Positive Technologies MaxPatrol 10 (MaxPatrol 10) is a system that collects, stores, and analyzes data about events that occur in a company’s IT infrastructure. This ensures information security monitoring for both the entire IT infrastructure and individual subdivisions, hosts, and applications. MaxPatrol 10 provides the following basic features: Asset inventory. The system regularly collects data about network hosts and
An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker to access certain restricted resources without authentication.
Subscribe & Follow
