28337 matches found
odat
Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...
CVE-2012-4431
¡Bienvenido a Apache Tomcat! ¿Qué es? El software Apache Tomcat® es una implementación de código abierto de las tecnologías Java Servlet, JavaServer Pages, Java Expression Language y Java WebSocket. Las especificaciones de Java Servlet, JavaServer Pages, Java Expression Language y Java WebSocket ...
CVE-2020-13457
CVE-2020-13457 CVE-2020-13457 Línea de tiempo ================ 2020-05-04: Descubierto 2020-05-11: Revisar problemas en el ecosistema del investigador 2020-05-20: Exploit PoC probado en Windows 2012 x64 2020-05-25: Notificación al proveedor 2020-05-27: Exploit PoC probado en Windows 10 x64...
ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 subTab or 2 tab parameter to createAnomaly.do; 3 url, 4 subTab, or 5 tab parameter to mindex.do; 6 tab parameter to index2.do; or 7 port...
WordPress Plugin Age Verification v0.4 - Open Redirect
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirectto parameter. id: CVE-2012-6499 info: name: WordPress Plugin Age...
WordPress Plugin Download Monitor < 3.3.5.9 - Cross-Site Scripting
A cross-site scripting vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dlsearch parameter to the default URI. id: CVE-2012-4768 info: name: WordPress Plugin Download Monitor 3.3.5.9 - Cross-Site...
WordPress Integrator 1.32 - Cross-Site Scripting
A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. id: CVE-2012-5913 info: name: WordPress Integrator 1.32 - Cross-Site Scripti...
WebsitePanel before v1.2.2.1 - Open Redirect
Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx id: CVE-2012-4032 info: name: WebsitePanel before v1.2.2.1 - Open Redirect author:...
OpenEMR 4.1 - Local File Inclusion
Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the formname parameter to 1 contrib/acog/printform.php; or 2 loadform.php, 3 viewform.php, or 4 trendform.php in interface/patientfile/encounter. id:...
MySQLDumper 1.24.4 - Directory Traversal
Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...
o5logon-fetch
o5logon-fetch A small Java program that attempts to exploit CVE-2012-3137 on vulnerable Oracle 11 servers. By exploiting this vulnerability, you can run offline brute force attacks until you discover a given user’s password, without any apparent audit trail. Vulnerability Details A good writeup o...
killosx
killosx Usa el exploit de Apple CoreText CVE-2012-3716 y lanza un AP para afectar a todos los dispositivos Apple vulnerables dentro del alcance wifi. Instalación: Ejecuta 'make install' en el directorio de killosx. Ahora killosx se puede ejecutar desde cualquier lugar con 'killosx'. Uso: killOSX...
CVE-2012-2982
Este repositorio no tiene un README...
CVE-2012-4681-Armoring
CVE-2012-4681-Blindaje Resumen general Un experimento manual de blindaje de evasión de antivirus para CVE-2012-4681 inspirado por http://security-obscurity.blogspot.com/2012/11/java-exploit-code-obfuscation-and.html. Exploit base: http://pastie.org/4594319 Resultados al 26/9/2014 y 2/8/2016...
CVE-2012-0158-reproduction
This repository does not have a README...
CVE-2012-2982-Python-PoC
CVE-2012-2982-Python-PoC Esto fue convertido de un módulo de metasploit como ejercicio para el estudio de OSCP. Originalmente surgió de la frustración por no tener exploits públicos para usar manualmente en la máquina Gamezone de TryHackMe. Analicé el código de metasploit y lo convertí a Python...
CVE-2012-2982_Python
CVE-2012-2982Python Script Python PoC como un ejercicio de tryhackme: https://tryhackme.com/room/intropocscripting Este es el metasploit CVE: https://www.exploit-db.com/exploits/21851 Esos son los cambios realizados después del descubrimiento del Exploit:...
MS15-034
MS15-034 MS15-034 POC La versión actual del servidor IIS es una versión vulnerable que contiene la vulnerabilidad conocida CVE-2015-1635, MS15-034. Al explotar esta vulnerabilidad, existe el riesgo de sufrir ataques como ejecución remota de código o provocar una pantalla azul. Sintaxis de prueba:...
CVE-2016-7255
CVE-2016-7255 Used to exploit cve-2016-7255 in 64 bit versions of Windows, tested on Workstation 7 SP1, 8.1, 10 prior to build 1607, and Server 2012 R2. To use cve-2016-7255 cve-2016-7255.exe 7 - Windows 7 SP1 cve-2016-7255.exe 81 - Windows 8.1 cve-2016-7255.exe 10 - Windows 10 prior to build 160...