tera.inquisition.cz Improper Access Control vulnerability

Open Bug Bounty ID: OBB-565955 Description| Value ---|--- Affected Website:| tera.inquisition.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Fsociety Hacking Tools Pack

Fsociety Menu Information Gathering Password Attacks Wireless Testing Exploitation Tools Sniffing & Spoofing Web Hacking Private Web Hacking Post Exploitation INSTALL & UPDATE Information Gathering : Nmap Setoolkit Port Scanning Host To IP wordpress user CMS scanner XSStracer Dork – Google Dorks...

Microsoft Windows ArchiTouch SMB Scanner

The ArchiTouch Vulnerability Scanning tool comes from a cluster of other attack tools. This module is used to gather information from servers about their vulnerabilities. Such scans may indicate preparation for further attacks...

WordPress W3 Total Cache 0.9.4.1 Race Condition

------------------------------------------------------------------------ Information disclosure race condition in W3 Total Cache WordPress Plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...

Apple TV Version Detection

The remote host is an Apple TV device. Nessus was able to obtain its version and model information via an HTTP request for the '/server-info' resource. Note that if 'Show potential false alarms' is enabled, this plugin may result in false positives. C Tenable Network Security, Inc...

OpenCA Detection

Detection of OpenCA. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Gratipay: nginx version disclosure on downloads.gratipay.com

Hello, Navigating to http://downloads.gratipay.com/Error goes to a 404 error page disclosing your Nginx version. Server information should be protected since anyone with a bad intent on would try to find exploit for the specified server version. Thanks, Footstep...

Hawkeye-G 3.0.1.4912 - Persistent Cross-Site Scripting Information Leakage

Hawkeye-G 3.0.1.4912 - Persistent Cross-Site Scripting Information Leakage Exploit Title: Persistent XSS, Information Leakage IDS / IPS Google Dork: intitle: Persistent XSS, Information Leakage IDS / IPS Date: 2015-07-25 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor...

Microsoft Windows win32k!xxxRealDrawMenuItem() Missing HBITMAP Bounds Checks

No description provided by source. Microsoft Windows win32k!xxxRealDrawMenuItem missing HBITMAP bounds checks ---------------------------------------------------------------------------- Microsoft produce two builds of each of thier supported operating system, a checked build and a free build. Th...

GameHouse dldisplay ActiveX control 0,Real Server 5.0/7.0 Internal IP Address Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/1049/info By default, Real Server includes the IP address of the server in data sent to the client. If the Real Server is installed on a machine in a NAT environment, where requests from the outside network are handled by...

Tomcat 3.0/3.1 Snoop Servlet Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1532/info A vulnerability exists in the snoop servlet portion of the Tomcat package, version 3.1, from the Apache Software Foundation. Upon hitting an nonexistent file with the .snp extension, too much information is...

frontpage_version

This plugin searches for the FrontPage Server Info file and if it finds it will try to determine the version of the Frontpage Server Extensions. The file is located inside the web server webroot. For example: http://localhost/vtiinf.html Plugin type Infrastructure Options This plugin doesnt have...

CouchDB Enum Utility

This module enumerates databases on CouchDB using the REST API without authentication by default. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CouchDB Enum Utility', 'Description' = %q This...

Information disclosure - ownCloud

Due to the inclusion of the Amazon SDK testing suite an unauthenticated attacker is able to gain additional informations about the server including: the PHP version the cURL version informations wether the following functions/modules are available: SimpleXML DOM SPL JSON PCRE File System Read/Wri...

Sensitive server info leaked from weather.gov Vulnerability

Kosova Hacker's Security group today release very sensitive server info of "The National Weather Service", which was gathered due to a "Local file inclusion" Vulnerability in weather.gov . By definition, Local File Inclusion also known as LFI is the process of including files on a server through...

Nessus On Android 1.0.1 Credential Disclosure

Exploit for hardware platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1...

xmpp-info NSE Script

Connects to XMPP server port 5222 and collects server information such as: supported auth mechanisms, compression methods, whether TLS is supported and mandatory, stream management, language, support of In-Band registration, server capabilities. If possible, studies server vendor. Script Argument...

Th3J35t3r (The Jester) claim to expose identities of LulzSec Leader "Sabu"

Th3J35t3r The Jester claim to expose identities of LulzSec Leader "Sabu" Th3J35t3r The Jester Just now Tweet "www.lulzsecurity.com - TANGO DOWN - 'this is General Hummel, from Alcatraz, Out' - https://t.co/oNm29Pv for the lulz. ". He doing ddos attack on Lulzsec website "www.lulzsecurity.com". an...

Nmap NSE net: afp-serverinfo

Shows AFP server information. This information includes the server's hostname, IPv4 and IPv6 addresses, and hardware type for example 'Macmini' or 'MacBookPro'. OpenVAS Vulnerability Test $Id: gbnmapafpserverinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors:...

Small Pirate <= 2.3 (avatar) Remote PHP File Execute PoC

Exploit for php platform in category web applications Exploit Title: Small Pirate Content of pwned.txt /home146/sub011/sc78626-TZRV/xxxxxxxxx.org/poc.php VICTIM: 207.182.149.243 info: Mozilla/5.0 X11; U; Linux i686; es-AR; rv:1.9.2.13 Gecko/20101206 Ubuntu/10.04 lucid Firefox/3.6.13 language:...