what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Nicholas von Pechmann

dnaLIMS Admin Module Command Execution

Posted Mar 20, 2017

Authored by h00die, Nicholas von Pechmann | Site metasploit.com

This Metasploit module utilizes an administrative module which allows for command execution. This page is completely unprotected from any authentication when given a POST request.

tags | exploit

advisories | CVE-2017-6526

SHA-256 | cfcbce3052c73130003476d0ee627bdcb72ab71008ac686ffaae35583cfb31c0

Download | Favorite | View

dnaLIMS Code Execution / XSS / Traversal / Session Hijacking

Posted Mar 10, 2017

Authored by Nicholas von Pechmann

dnaLIMS DNA sequencing application suffers from an improperly protected web shell, a directory traversal, insecure password storage, session hijacking, cross site scripting, and improperly protected content vulnerabilities.

tags | exploit, web, shell, vulnerability, xss, file inclusion

advisories | CVE-2017-6526, CVE-2017-6527, CVE-2017-6528, CVE-2017-6529

SHA-256 | 2c765d1002998d2516a62972d8bae6e5afe2348f1e7d3cf6ef351c942e91a44c

Download | Favorite | View