>> TAG: #remote exploit

Linux/ARM64 – Egghunter (PWN!PWN!) + execve(“/bin/sh”, NULL, NULL) + mprotect() Shellcode (88 Bytes)

Sahi pro 8.x – Directory Traversal

Linux/ARM64 – Reverse (::1:4444/TCP) Shell (/bin/sh) +IPv6 Shellcode (140 bytes)

SAP Crystal Reports – Information Disclosure

Linux/ARM64 – Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (128 bytes)

ZoneMinder 1.32.3 – Cross-Site Scripting

Linux/ARM64 – execve(“/bin/sh”, NULL, NULL) Shellcode (40 Bytes)

PowerPanel Business Edition – Cross-Site Scripting

CiuisCRM 1.6 – ‘eventType’ SQL Injection

Varient 1.6.1 – SQL Injection