deepcore - :: Deepquest ::

>> PHPKB Multi-Language 9 image-upload.php Code Execution

USER: deepcore // 2020-03-17 // 0 CMT

PHPKB Multi-Language 9 suffers from an image-upload.php remote authenticated code execution vulnerability.

>> Rconfig 3.x Chained Remote Code Execution

USER: deepcore // 2020-03-17 // 0 CMT

This Metasploit module takes advantage of a command injection vulnerability in the path parameter of the ajax archive file functionality within the rConfig web interface in order to execute the…

[SECURITY]

>> [remote] Rconfig 3.x – Chained Remote Code Execution (Metasploit)

USER: deepcore // 2020-03-17 // 0 CMT

Rconfig 3.x – Chained Remote Code Execution (Metasploit)

[SECURITY]

>> [remote] ManageEngine Desktop Central – Java Deserialization (Metasploit)

USER: deepcore // 2020-03-17 // 0 CMT

ManageEngine Desktop Central – Java Deserialization (Metasploit)

[EXPLOIT]

>> CoronaBlue / SMBGhost Microsoft Windows 10 SMB 3.1.1 Proof Of Concept

USER: deepcore // 2020-03-16 // 0 CMT

CoronaBlue aka SMBGhost proof of concept exploit for Microsoft Windows 10 (1903/1909) SMB version 3.1.1. This script connects to the target host, and compresses the authentication request with a bad…

[EXPLOIT]

>> Microsoft Windows SMB 3.1.1 Remote Code Execution

USER: deepcore // 2020-03-16 // 0 CMT

Microsoft Windows SMB version 3.1.1 suffers from a code execution vulnerability.

[EXPLOIT]

>> Zyxel CNM SecuManager 3.1.0 / 3.1.1 Hardcoded Keys / XSS / Code Execution

USER: deepcore // 2020-03-16 // 0 CMT

Zyxel CNM SecuManager versions 3.1.0 and 3.1.1 suffer from having hard-coded secrets, missing authentication, backdoors, and remote code execution vulnerabilities.