Showing 1 - 15 of 15

Files from Hodorsec

ERPNext 12.14.0 SQL Injection: Posted Jan 22, 2021; Authored by Hodorsec; ERPNext version 12.14.0 suffers from an authenticated remote SQL injection vulnerability.; tags | exploit, remote, sql injection; SHA-256 | 63b22913276ba3627f6534a8ceb2131b07a5290477a6a8cbc7ec0e16f68babf5; Download | Favorite | View

LibreNMS 1.46 SQL Injection: Posted Dec 14, 2020; Authored by Hodorsec; LibreNMS version 1.46 suffers from an authenticated remote SQL injection vulnerability in the MAC Account Graph. Original discovery of SQL injection in this version is attributed to Punt in May of 2020.; tags | exploit, remote, sql injection; SHA-256 | ea3344c4db8aac29739017c56d9f67f842adeab17b741741d19a6459f7ef0656; Download | Favorite | View

ManageEngine Applications Manager Authenticated Remote Code Execution: Posted Sep 4, 2020; Authored by Hodorsec; ManageEngine Applications Manager authenticated remote code execution exploit that leverages the newInstance() and loadClass() methods being used by the "WeblogicReference", when attempting a Credential Test for a new Monitor. Versions below 14720 are affected.; tags | exploit, remote, code execution; advisories | CVE-2020-14008; SHA-256 | 0c0cd9e0020b9b9ebc100236161c5168965c12c7c555ee30775d0cba210c80f1; Download | Favorite | View

ATutor LMS 2.2.4 Weak Password Reset Hash: Posted May 5, 2020; Authored by Hodorsec; ATutor LMS version 2.2.4 suffers from having a weak password reset hash.; tags | exploit; SHA-256 | 695d43c107bcbb8c5b7a5b23041b58961922c09223a6f7f84fa51fde122cb2f4; Download | Favorite | View

AIDA64 Engineer 6.20.5300 Buffer Overflow: Posted Apr 2, 2020; Authored by Hodorsec; AIDA64 Engineer version 6.20.5300 Report File filename SEH buffer overflow exploit.; tags | exploit, overflow; SHA-256 | fe7db04e0b5015baf2963e005ec2c8ca15943475775055a6ef16d357d909edb1; Download | Favorite | View

10Strike LANState 9.32 Host Check hostname Buffer Overflow: Posted Apr 1, 2020; Authored by Hodorsec; 10Strike LANState version 9.32 on x86 Host Check hostname SEH buffer overflow exploit.; tags | exploit, overflow, x86; SHA-256 | 14d5fb0369d804df952aa677f189c95cee2dc58e248e3ea40989ccac3e77a17b; Download | Favorite | View

10-Strike Network Inventory Explorer 9.03 Buffer Overflow: Posted Mar 30, 2020; Authored by Hodorsec; 10-Strike Network Inventory Explorer version 9.03 Read-from-file buffer overflow exploit that uses SEH and ROP.; tags | exploit, overflow; SHA-256 | d9902b1b7f52b90b881ecd03566b14bdebeafb458532ad05ad92d0692856be5f; Download | Favorite | View

FreeCommander XE 2020 Pathname Buffer Overflow: Posted Mar 28, 2020; Authored by Hodorsec; FreeCommander XE 2020 Build 810a 32-bit suffers from a pathname buffer overflow vulnerability.; tags | exploit, overflow; SHA-256 | 60d82e33f0c7f4253ddc265c3479423769c54f1a48cc6ae26922cfd73df607d2; Download | Favorite | View

Yachtcontrol 2019-10-06 Remote Code Execution: Posted Dec 6, 2019; Authored by Hodorsec; Yachtcontrol versions dated 2019-10-06 suffer from an unauthenticated remote code execution vulnerability.; tags | exploit, remote, code execution; advisories | CVE-2019-17270; SHA-256 | b2252962f4ffefcd60f7bc45599cdb4a32a747d57fdae0a5dda1b6d23e8a297e; Download | Favorite | View

Core FTP 2.0 Build 653 PBSZ Denial Of Service: Posted Mar 12, 2019; Authored by Hodorsec; Core FTP version 2.0 build 653 suffers from a PBSZ command denial of service vulnerability.; tags | exploit, denial of service; SHA-256 | 00eab4c7b5f5b0eaa067ef5307df33a9314ec54ced7998e6a06d61125051fb73; Download | Favorite | View

Anyburn 4.x x86 Buffer Overflow: Posted Mar 7, 2019; Authored by Hodorsec; Anyburn version 4.3 x86 "Copy disc to image file" buffer overflow SEH unicode exploit.; tags | exploit, overflow, x86; SHA-256 | 093efaf0e4484fa5ee3691f96a71fdfc76d836f48b33f9b0e592f75d34a8ad15; Download | Favorite | View

RealTerm Serial Terminal 2.0.0.70 Echo Port Buffer Overflow: Posted Mar 6, 2019; Authored by Matteo Malvica, Hodorsec, Alejandra Sanchez; RealTerm Serial Terminal version 2.0.0.70 suffers from an echo port buffer overflow vulnerability. Modifications to the original proof of concept include the fact that it uses a larger payload size for shellcode due to different jump offsets and filters the bad character 0x3a as this is the character for port which causes an error ":".; tags | exploit, overflow, shellcode, proof of concept; SHA-256 | 7d6aa76dc1238452c1e6142d776b2b51e99c79aa8cf79ef87b7b1cde732ae71f; Download | Favorite | View

Hodorsec Linux Binary Encryption Utility: Posted Jan 10, 2019; Authored by Hodorsec; This archive contains a Linux x86/x64 payload AES-128 CBC encrypter and payload decrypter/runner.; tags | tool, x86; systems | linux, unix; SHA-256 | 456de0042812f5a98189859583df3dd73d9d360ecc37ccc72ee879753d9ca583; Download | Favorite | View

Ricoh myPrint Hardcoded Credentials / Information Disclosure: Posted Nov 20, 2018; Authored by Hodorsec; Ricoh myPrint suffers from hardcoded application credential and information disclosure vulnerabilities. The myPrint windows client version 2.9.2.4 and myPrint android client version 2.2.7 are both affected.; tags | exploit, vulnerability, info disclosure; systems | windows; advisories | CVE-2018-18006; SHA-256 | ecf580b9a434a73107f0ba5a72c008e086a0dd48d9c43c99626d47b2773c9b0d; Download | Favorite | View

Easy File Sharing Web Server 6.9 Buffer Overflow: Posted Sep 11, 2018; Authored by Hodorsec; Easy File Sharing Web Server version 6.9 POST msg.ghp UserID remote buffer overflow SEH exploit with DEP bypass and ROP.; tags | exploit, remote, web, overflow; SHA-256 | 5052bd3ade9eabb5408d9af16042f88ccdd5c0093460e58e70f4514aa17d56cc; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days