Mozilla SSL spoofing with history.back() and history.forward()

The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a redirect, and...

Java Meterpreter, Java Reverse TCP Stager

Run a meterpreter server in Java. Connect back stager This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 5256 include Msf::Payload::Stager include Msf::Payload::Java include...

[Python] CGI shell

Данная утилита предоставляет веб-интерфейс для удаленной работы c "unix-like" операционной системой. Интерфейс в стиле WSO скрин. Стандартный функционал: работа с файлами и папками, выполнение команд. "Bind port to /bin/sh" и "Back-connect" работают без создания каких-либо файлов в /tmp за счет...

Snort Back Orifice - Pre-Preprocessor Remote (Metasploit)

$Id: snortbopre.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

cyask system background Getshell vulnerabilities-vulnerability warning-the black bar safety net

cyask will set the parameters to the write cache, the write cache when removed from the database unfiltered data directly to write the file, resulting in can get webshell Analysis: admin/settingmanage. php file: ? php adminfooter; exit; elseif$adminaction=='settingedit' ifisset$POST'editsubmit'...

Netartmedia Car Portal SQL Injection

================================================== Netartmedia Car Portal SQLi Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

Netartmedia Real Estate Portal SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Netartmedia Real Estate Portal SQL Injection Vulnerability ==========================================================...

Joomla Component JE Story Submit SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla JE Story submit SQL Injection Vendor url:http://joomlaextensions.co.in Version:1.4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com...

Joomla JE Story 1.4 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Joomla! Component jesubmit 1.4 - SQL Injection

Joomla! Component jesubmit 1.4 - SQL Injection Exploit Title: Joomla JE Story submit SQL Injection Vendor url:http://joomlaextensions.co.in Version:1.4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct0r Team...

PHP Meterpreter, PHP Reverse TCP Stager

Run a meterpreter server in PHP. Reverse PHP connect back stager with checks for disabled functions This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 1116 include Msf::Payload::Stage...

Important: Red Hat Security Advisory: rhev-hypervisor security, bug fix, and enhancement update

An updated rhev-hypervisor package that fixes two security issues, multiple bugs, and adds enhancements is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in administrator/index.php...

OCS Inventory NG Multiple SQL Injection Vulnerabilities

This host is running OCS Inventory NG and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodocsinventoryngmultsqlinjvulnmay10.nasl 5394 2017-02-22 09:22:42Z teissa $ OCS Inventory NG Multiple SQL Injection Vulnerabilities Authors: Madhuri D Copyright:...

Task Freak 'loadByKey()' SQL Injection Vulnerability

This host is running Task Freak and is prone SQL Injection Vulnerability. OpenVAS Vulnerability Test $Id: secpodtaskfreaksqlinjvuln.nasl 5838 2017-04-03 10:26:36Z cfi $ Task Freak 'loadByKey' SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod, http://www.secpod.com...

With a simple asp Trojan back door, to find a asp Backdoor Trojan-exploit-warning-the black bar safety net

I waited for the side dishes yourself not write to asp of the horse, only with prawns to write, but the online streaming of all don't know is the several hand, it is inevitable that some ill-intentioned people will be on the inside plus the back door. Finally get to a shell and be someone stole h...

ASP. Net under the C/S back door--WebAdmin 2. Y application details-vulnerability warning-the black bar safety net

Hello everyone, don't know you have not used even the WebAdmin 2. X? Well, yeah, the one that ASP. Net environment under the back door. That's my immature works, if have what not hand over the place but also hope bear with me. Oh, today?, or let the coupling to the“Huang po sells melon from sell...

postgresql security update

7.3.21-3 - Fix CVE-2010-1169, CVE-2010-1170, CVE-2009-4136, CVE-2010-0733, CVE-2010-0442 via back-ports of upstream patches for Postgres 7.4 Resolves: 589541...

Snort Back Orifice BOPing (CVE-1999-0660)

Snort is an open source network intrusion detection system IDS capable of analyzing network traffic, logging, and dropping individual packets based on user defined rules. The program applies user defined rules to received network traffic in order to detect potentially malicious traffic. Snort is...

Sablog-X V2. X admin permissions spoofing and arbitrary variable overwrite vulnerability-vulnerability warning-the black bar safety net

Sablog-X is a PHP and MySQL build a blog system. Affected version:Sablog-X-2. x Said First admin permission spoofing vulnerability Due to the Sablog-x v2. x the back-end authentication process there is a serious logical problem, and leads to the special structure of the cookie log in directly to...