Showing 1 - 2 of 2

Files from Zemnmez

VSCode ipynb Remote Code Execution: Posted Jun 11, 2024; Authored by h00die, Zemnmez | Site metasploit.com; VSCode when opening a Jupyter notebook (.ipynb) file bypasses the trust model. On versions v1.4.0 through v1.71.1, its possible for the Jupyter notebook to embed HTML and javascript, which can then open new terminal windows within VSCode. Each of these new windows can then execute arbitrary code at startup. During testing, the first open of the Jupyter notebook resulted in pop-ups displaying errors of unable to find the payload exe file. The second attempt at opening the Jupyter notebook would result in successful execution. Successfully tested against VSCode 1.70.2 on Windows 10.; tags | exploit, arbitrary, javascript; systems | windows; advisories | CVE-2022-41034; SHA-256 | dfacdfad1b8092f162656aa7bc4778fc74536b788b7075dfea96dafa5efb29f3; Download | Favorite | View

Buffalo NAS Remote Shutdown: Posted Jan 25, 2016; Authored by Zemnmez; Buffalo NAS devices suffer from a remote shutdown / denial of service vulnerability.; tags | exploit, remote, denial of service; SHA-256 | f99e8c369f01da7e80e9a7b0df078a3ffdd172d69408918d83065f4a607f1069; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days