Exploit Collector
Oliver Library Server 5 Arbitrary File Download

https://1.bp.blogspot.com/-PwD2Dirg2NY/WWlu3CzGC6I/AAAAAAAAIIs/x87GenQxU4E4sY7pWpFvaHW3XEOYBksJQCLcBGAs/s1600/h10.png
Oliver Library Server 5 versions prior to 8.00.008.053 suffer from an arbitrary file download vulnerability.

MD5 | 47de3fec9dce2620943ba2fb7c366359

Download
# Exploit Title: Oliver Library Server v5 - Arbitrary File Download
# Date: 14/12/2021
# Exploit Authors: Mandeep Singh, Ishaan Vij, Luke Blues, CTRL Group
# Vendor Homepage: https://www.softlinkint.com/product/oliver/
# Product: Oliver Server v5
# Version: < 8.00.008.053
# Tested on: Windows Server 2016

Technical Description:
An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 8.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.

Steps to Exploit:

1) Use the following Payload:
https://
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Log4j2 Log4Shell Regexes

https://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png
If you are curious about web application firewall (WAF) bypass payloads that can be leveraged to exploit the log4j2 code execution vulnerability, you should look at this tool.

MD5 | eeb860d1a0949b84609fd208bbee18be

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
OpenEMR 6.0.0 / 6.1.0-dev SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
L4sh Log4j Remote Code Execution

https://4.bp.blogspot.com/-JipZY3hUF7s/WWlu7l1ccBI/AAAAAAAAIJc/HAISYb4KBsQdeIf6OzzYRuXiYaIkpQnmACLcBGAs/s1600/h110.png
Fully independent log4j exploit that does not require any 3rd party binaries. The exploit sprays the payload to all possible logged HTTP Headers such as X-Forwarding, Server-IP, User-Agent.

MD5 | 5e90e8de3aa73653350d2132a2ddfad8

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
SAP Netweaver IUUC_GENERATE_ACPLAN_DELIMITER ABAP Code Injection

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Why Cloud Storage Isn't Immune to Ransomware

Cloud security is a shared responsibility. which sometimes leads to security gaps and complexity in risk management.

Dark Reading: Attacks/Breaches
What Are the Pros and Cons of a SASE Architecture?

SASE is a promising and burgeoning networking architecture approach, but it's not without some challenges.

Dark Reading: Attacks/Breaches
Why We Need "Developer-First" Application Security

The way to improve the security of the modern software development life cycle and reduce the number of application-based breaches is to re-center app security around the needs of developers.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Privacy and Safety Issues With Facebook's New 'Metaventure'

With access to a user's 3D model and full-body digital tracking, attackers can recreate the perfect replica of a C-level executive to trick employees.

___________________________
@hacking_Attack
@Hacking_Video