🖥 Cacti 1.2.26 CVE-2024-25641 RCE Automated Exploit 🪩

🔠0️⃣🔠🔠🔠🔠🔠🔠 🔣 https://system32.ink/cacti-1-2-26-cve-2024-25641-rce-automated-exploit/ 🖥

💻 Fully automated exploit for CVE-2024-25641. When a user is authenticated, Cacti version 1.2.26 is vulnerable to an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code on the web server (RCE).🐻

🖥 https://system32.ink/oxyco-rat-pro-v3-9-6/ 🖥

💻 Oxyco RAT PRO v3.9.6 🤡

ℹ️ Compatible with all devices
🟢 Bypass Play Store Signature
😈 The bypass does not depend on APK files outside the Play Store
🛡 100% FUD APK file
⏳ No screen permissions required
🍎 No permission requests when installing APKs on your device

⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰

gg's hacker's ( have a good day —❤️
‼️anyone remember ? miss you all

Link

Search by keyword, 
filter by vulnerability type,
service affected and OS. Detailed description for each exploit
(with PoC, Nuclei template or Metasploit module

#hacker_bano_chutiya_nhe 🌜❤️🌛 { back to work }

Thank You For 1️⃣0️⃣🔠 Subscribers 💟

Something 🆕 Is Comming 🌟🌟

🖥 🔠🔠🔠🔠🔠🔠🔠🔣🟰 https://system32.ink/avtech-devices-rce-cve-2024-7029-exploit/ 🖥

💻 AvTech Devices RCE CVE-2024-7029 Exploit🖥

📡➡️CVE-2024-7029 is a critical security flaw in AVTech devices that allows unauthorized access through authentication bypass, potentially leading to remote code execution. This vulnerability is particularly concerning because it can be exploited remotely, making networks with these devices highly vulnerable.➡️

⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰

🖥 https://system32.ink/mediatek-wi-fi-chipsets-cve-2024-20017-exploit/

🖥 MediaTek Wi-Fi Chipsets CVE-2024-20017 Exploit 💻

⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰
🎮 Zero Click Exploit 😎
⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰

ℹ️ The vulnerability is a buffer overflow caused by a copy operation that uses a length value taken directly from attacker-controlled packet data without bounds checking. Overall it’s a pretty simple bug to understand as it’s just a run-of-the-mill stack buffer overflow, so I thought I’d use this bug as a case study to explore multiple exploit strategies that can be taken using for this one bug, applying different exploit mitigations and conditions along the way. I think this is interesting as it provides an opportunity to focus on the more creative parts of exploit development: once you know there’s a bug, and you understand the constraints, coming up with all of the different ways you can influence the logic of the application and the effects of the bug to get code execution and pop a shell.➡️

🖥 https://system32.ink/web-help-desk-hardcoded-credential-cve-2024-28987-exploit/

🖥 Web Help Desk Hardcoded Credential CVE-2024-28987 Exploit #️⃣

ℹ️ The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. ➡️

🚩 गणेशोत्सव की आप सभी को हार्दिक शुभकामनाएं।

🚩-------------------- गणनायकाय गणदैवताय गणाध्यक्षाय धीमहि । गुणशरीराय गुणमण्डिताय गुणेशानाय धीमहि…🚩

🔠 🔣 https://system32.ink/litespeed-unauthorized-account-takeover-cve-2024-44000-exploit/ 🖥

🖥 LiteSpeed Unauthorized Account Takeover CVE-2024-44000 Exploit 🎮

⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰

ℹ️ CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin.📡 This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data. ➡️

🖥➡️ https://system32.ink/onimai-rat-v1-7-1-leaked-by-onimai-fuckers/

🫡 Onimai Rat v1.7.1 Leaked By ONIMAI FUCKERS 🎮

✏️Features

➡️Real-Time Desktop Monitoring
➡️Secure File Transfer
➡️Hidden VNC (HVNC)
➡️Encrypted Communication
➡️UAC Bypass
➡️Remote Webcam Access
➡️Multi-IP Host Support
➡️Crypto Clipper
➡️Password Recovery
➡️Anti-Debug & Anti-Sandbox
➡️Anti-Virtualization & Anti-Tamper
➡️Anti-Screenshare
➡️Ring 3 Rootkit
➡️In-Memory Execution
#️⃣Fully Undetected Scantime
#️⃣Undetected Runtime
#️⃣Remote Shell Access
#️⃣Encrypted TCP Connections
#️⃣Reverse Proxy Support
#️⃣Fileless Execution
#️⃣Persistent Access
#️⃣.Net & VB Code Execution
#️⃣System Watcher
#️⃣Startup Manager
#️⃣Registry Editor
#️⃣Remote Desktop (with Mouse Graphics Support)
#️⃣Any.Run Bypass
#️⃣FUD on Tria.ge
#️⃣NetLimiter & Wireshark Bypass
#️⃣System Watcher

🖥 🔣 https://system32.ink/vicidial-unauthenticated-sqli-to-rce-cve-2024-8503-and-cve-2024-8504-exploit/

📞VICIdial Unauthenticated SQLi to RCE (CVE-2024-8503 and CVE-2024-8504) Exploit 🎮

ℹ️These vulnerabilities allow an attacker to retrieve administrative credentials through SQLi and ultimately execute arbitrary code on the target server via an RCE attack.➡️

🚨An attacker with Unauthenticated access to VICIdial as an "agent" can execute arbitrary shell commands as the "root" user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective.🎚

⏰⏰⏰⏰⏰⏰⏰⏰⏰