ncccodenavi

ncccodenavi NCC Code Navi هو عارض النصوص وباحث لمراجعي الكود البرمجي تم إصداره كمصدر مفتوح بواسطة NCC Group Plc - http://www.nccgroup.com/ تطوير: Ollie Whitehouse، ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi تم إصداره بموجب رخصة AGPL؛ راجع LICENSE لمزيد من...

LDAPFragger - Command And Control Tool That Enables Attackers To Route Cobalt Strike Beacon Data Over LDAP

LDAPFragger is a Command and Control tool that enables attackers to route Cobalt Strike beacon data over LDAP using user attributes. For background information, read the release blog: http://blog.fox-it.com/2020/03/19/ldapfragger-command-and-control-over-ldap-attributes Dependencies and...

Stack overflow

Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior .NET 4.5, 4.0, and 3.5 Framework versions only are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow...

SharpChromium - .NET 4.0 CLR Project To Retrieve Chromium Data, Such As Cookies, History And Saved Logins

SharpChromium is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta. Currently, it can extract: Cookies in JSON format History with associated cookies for each history item Saved Logins Note: All cookies returned are in JSON format. If you have th...

Microsoft Windows 10 - Theme API ThemePack File Parsing

Microsoft Windows 10 - Theme API ThemePack File Parsing Exploit Title: Microsoft Windows 10 - Theme API 'ThemePack' File Parsing Google Dork: n/a Date: 2020-10-28 Exploit Author: Eduardo Braun Prado Vendor Homepage: http://www.microsoft.com/ Software Link: http://www.microsoft.com/ Version: 10...

Soroush IM Desktop app 0.15 - Authentication Bypass Vulnerability

Exploit for linux platform in category local exploits Exploit Title: Soroush IM Desktop app 0.15 - Authentication Bypass Exploit Author: VortexNeoX64 Vendor Homepage: https://soroush-app.ir Software Link: https://soroush-app.ir/UploadedData/Soroush.exe Version: 0.15 BETA Tested on: Windows 10 180...

SQL Injection framework: Seringa

Seringa – SQL Injection framework Seringa Romanian for seringe is an SQL injection framework featuring high customizability and a user-friendly interface. It is completely open source. Uses the .NET 4.0 framework and Windows Presentation FoundationWPF for the GUI. With regard to design it utilize...

Nmap NSE net: broadcast-wsdd-discover

Uses a multicast query to discover devices supporting the Web Services Dynamic Discovery WS- Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. OpenVAS Vulnerability Test $Id: gbnmapbroadcastwsdddiscovernet.nasl 5499...

Nmap NSE net: wsdd-discover

Retrieves and displays information from devices supporting the Web Services Dynamic Discovery WS- Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. OpenVAS Vulnerability Test $Id: gbnmapwsdddiscovernet.nasl 5499...

broadcast-wsdd-discover NSE Script

Uses a multicast query to discover devices supporting the Web Services Dynamic Discovery WS-Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. Script Arguments max-newtargets, newtargets See the documentation for the...

wsdd-discover NSE Script

Retrieves and displays information from devices supporting the Web Services Dynamic Discovery WS-Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. Script Arguments max-newtargets, newtargets See the documentation for t...

CVE-2008-6858

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

Authentication flaw

Xigla Software Absolute Form Processor .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

Authentication flaw

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6858

Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6858

CVE-2008-6858 affects Absolute Banner Manager .NET 4.0. The weakness allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a specific value. The official description consistently states this is an authentication bypass leading to admin-level access...

CVE-2008-6863

CVE-2008-6863 : Xigla Software Absolute Form Processor .NET 4.0 contains an authentication bypass. Remote attackers can gain administrative access by setting a specific cookie value. Impact is described as partial confidentiality, integrity, and availability with a CVSS v2 base score of 7.5 (HIGH...

Sql injection

SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands via the z parameter...

CVE-2007-6291

CVE-2007-6291 affects Xigla Absolute Banner Manager .NET 4.0. The vulnerability is a SQL injection in abm.aspx accessible via the z parameter, enabling remote attackers to execute arbitrary SQL commands. The entry is rated CVSS v2 base score 7.5 (HIGH) with network access and low complexity. Expl...

Cross site scripting

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...