Anonimo501

2 exploits Active since Aug 2018

CVE-2020-0796 NOMISEC CRITICAL SCANNER

Windows 10 1903/1909 and Windows Server 1903/1909 - Remote Code Execution via SMBv3 Compression Buffer Overflow

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

2 stars

CVSS 10.0

View Code

CVE-2018-15473 NOMISEC MEDIUM WORKING POC

OpenSSH < 7.7 - User Enumeration via Authentication Request Timing

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

CVSS 5.3

View Code