Raspberry Pi Default Credentials Exploit Update |
Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges.
This update improves Python 3 support. |
March 4, 2022 |
CVE-2021-38759 |
|
Exploits / Remote |
Impact |
Microsoft Windows Print Spooler Elevation of Privilege Vulnerability Exploit (CVE-2022-21999) |
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. |
February 25, 2022 |
CVE-2022-21999 |
Windows |
Exploits / Local |
Impact |
VMware Horizon Log4shell Remote Code Execution Vulnerability Exploit |
JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware Horizon Connection Server, allows unauthenticated attackers to execute system commands. |
February 21, 2022 |
CVE-2021-44228 |
Windows |
Exploits / Remote Code Execution |
Impact |
.NET Assembly Execution |
This update adds the capability to Windows agents of executing .net assemblies in the target's memory.
Also, a specific module to trigger SharpHound (BloodHound data Collector) is included in it. |
February 18, 2022 |
|
|
Post Exploitation |
Impact |
VMware vCenter Server Log4shell Remote Code Execution Vulnerability Exploit Update |
This update adds SSO domain name detection. |
February 17, 2022 |
CVE-2021-44228 |
Windows, Linux |
Exploits / Remote Code Execution |
Impact |
Vodafone H-500-s 3.5.10 WiFi Password Disclosure |
Vodafone H-500-s 3.5.10 routers credential disclosure vulnerability |
February 9, 2022 |
|
|
Exploits / Client Side |
SCADAPRO |
Oracle WebLogic Server 14.1.1.0.0 Local File Inclusion |
Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.
Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. |
February 9, 2022 |
CVE-2022-21371 |
|
Exploits / Remote |
SCADAPRO |
OpenHAB 3.2.0 Authenticated Remote Code Execution |
Openhab Authenticated Remote Code Execution |
February 9, 2022 |
|
Windows, Linux |
Exploits / Remote Code Execution |
SCADAPRO |
Fujitsu-Siemens ServerView Remote Command Execution |
ServerView has a Remote Command Execution in its Webinterface. The DBAsciiAccess CGI script provides a "ping" functionality. In the subparameter "Servername" of the parameter "Parameterlist" of this script, the IP address to be pinged is given. This IP address will be given as a parameter to the ping program without further sanitization. By adding a trailing semicolon after the IP, an attacker can add arbitrary shell commands which will be executed with the permissions of the webserver user. |
February 9, 2022 |
CVE-2007-3011 |
|
Exploits / Remote |
SCADAPRO |
Standa SMCVieW Remote Code Execution Vulnerability |
This module will receive HTTP requests from vulnerable clients and install agents on them. |
February 9, 2022 |
|
|
Exploits / Client Side |
SCADA |
ICPDAS NAPOPC_ST DA Server 0-Day Denial Of Service |
This module causes a Denial of Service in NAPOPC_ST DA Server |
February 9, 2022 |
|
Windows |
Denial of Service / Remote |
SCADA |
Win32k Window Object Type Confusion Local Privilege Escalation |
The vulnerability is a win32k window object type confusion leading to an OOB (out-of-bounds) write which can be used to create arbitrary memory read and write capabilities within the Windows kernel to achieve elevated privileges. |
February 9, 2022 |
CVE-2022-21882 |
Windows |
Exploits / Local |
Impact |
PolicyKit pkexec Elevation of Privilege Vulnerability Exploit |
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. |
February 4, 2022 |
CVE-2021-4034 |
Linux |
Exploits / Local |
Impact |
NTFS Set Short Name Checker |
This module allow to set a short name 8.3 of a file when you don't have write privileges to the directory where the file is located.The vulnerability exists due to NtfsSetShortNameInfo does not properly impose security restrictions in NTFS Set Short Name, which leads to security restrictions bypass and privilege escalation.
|
January 28, 2022 |
CVE-2021-43240 |
Windows |
Exploits / Tools |
Impact |
WebHMI_RCE |
The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution. Tested on WebHMI 4.0.7475 |
January 18, 2022 |
|
|
Exploits / Remote Code Execution |
SCADAPRO |
Grafana 8.3.0 - Directory Traversal |
Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: (grafana_host_url)/public/plugins//, where is the plugin ID for any installed plugin. |
January 18, 2022 |
|
|
Exploits / Remote File Disclosure |
SCADAPRO |
DBI Technologies Studio Controls for COM Remote Code Execution Vulnerability |
This module will receive HTTP requests from vulnerable clients and install agents on them. |
January 18, 2022 |
|
|
Exploits / Client Side |
SCADAPRO |
Siemens SIMATIC S7-300 CPU Remote Denial of Service |
Specially crafted packets may also be sent to S7-300 CPU Port 80 (default), result in a denial-of-service. |
January 17, 2022 |
|
|
Denial of Service / Remote |
SCADA |
Keysight Communications Fabric Denial of Service |
Remote Denial Keysight Communications Fabric |
January 17, 2022 |
|
Windows |
Denial of Service / Remote |
SCADA |
JatonTec Config Download Vulnerability Exploit |
This module exploits a download the persistent settings file. |
January 17, 2022 |
|
FreeBSD |
Exploits / Remote |
SCADA |
IMT Analytics AG FlowAnalyser FlowLab Remote Code Execution Vulnerability |
This module will receive HTTP requests from vulnerable clients and install RCE exploit on them. |
January 17, 2022 |
|
|
Exploits / Client Side |
SCADA |
Raspberry Pi Default Credentials Exploit |
Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges. |
January 6, 2022 |
CVE-2021-38759 |
|
Exploits / Remote |
Impact |
Microsoft Windows NTFS Elevation of Privilege Vulnerability Exploit |
An elevation of privilege vulnerability exists in Windows when the NTFS component fails to properly handle objects in memory.
An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, then install programs, view,
change, delete data or create new accounts with full user rights.
|
December 27, 2021 |
CVE-2021-31956 |
Windows |
Exploits / Local |
Impact |
Grafana getPluginAssets Path Traversal Local File Disclosure Exploit |
A path traversal vulnerability in Grafana may allow an unauthenticated attacker to download system files through specially crafted HTTP resource requests. |
December 21, 2021 |
CVE-2021-43798 |
Windows, Linux |
Exploits / Remote File Disclosure |
Impact |
VMware vCenter Server Log4shell Remote Code Execution Vulnerability Exploit |
JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vCenter Server, allows unauthenticated attackers to execute system commands. |
December 13, 2021 |
CVE-2021-44228 |
Windows, Linux |
Exploits / Remote Code Execution |
Impact |