SSRF Vulnerability in Jspxcms

Jspxcms is an open source, Java-based content management system CMS. Jspxcms suffers from an SSRF vulnerability. It allows an attacker to initiate requests to an intranet host to obtain banner information for web application reachable server services as well as collect fingerprinting of intranet...

Nextcloud: Banner Grabbing - Apache Server Version Disclosure

I have found a little information disclosure on your system. Banner Grabbing is a technique used to gain information about a remote server. Additionally, this technique is use to get information about remote servers. I've captured the HTTP request while visiting...

Fi6S - IPv6 Network Scanner Designed To Be Fast

fi6s is a IPv6 port scanner designed to be fast. This is achieved by sending and processing raw packets asynchronously. The design and goal is pretty similar to Masscan, though it is not as full-featured yet. Building Building should be fairly easy on up-to-date distros. On Ubuntu 16.04 xenial it...

Opmantek Open-AudIT Detection

Detection of Opmantek Open-AudIT. The script sends a connection request to the server and attempts to detect Opmantek Open-AudIT and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

ASUS infosvr Authentication Bypass Command Execution Exploit

This Metasploit module exploits an authentication bypass vulnerability in the infosvr service running on UDP port 9999 on various ASUS routers to execute arbitrary commands as root. This Metasploit module launches the BusyBox Telnet daemon on the port specified in the TelnetPort option to gain an...

Arpag - Automatic Exploit Tool

arpağ: In Turkish mythology magical word means. The tool name arpag has been selected because it has made the exploit process automatic. Installation: git clone https://github.com/anilbaranyelken/arpag.git cd tulpar pip install -r requests Usage: arpag.py -h IPaddress Exploitstatus Portbaslangic...

Bacula-Web Detection

Detection of Bacula-Web. The script sends a connection request to the server and attempts to detect Bacula-Web and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2017-3972

Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows attackers to execute arbitrary code via the server banner leaking potentially sensitive or security relevant information...

CVE-2017-3972

Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows attackers to execute arbitrary code via the server banner leaking potentially sensitive or security relevant information...

CVE-2017-3972 SB10192 - Network Security Management (NSM) - Infrastructure-based foot printing vulnerability

Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows attackers to execute arbitrary code via the server banner leaking potentially sensitive or security relevant information...

Microsoft IIS 7.0 Vulnerabilities (uncredentialed) (PCI/DSS)

According to the HTTP server banner the remote server is IIS 7.0. The server may be vulnerable to a number of vulnerabilities including a couple of remote code execution vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108808; scriptversion"1.8";...

Open Redirection Issue in JIRA Announcement Banner

Hi, I am currently using Jira 6.1. And the issue is related to the Jira announcement banner. While editing/adding the announcement banner i tried to inject a script like window.location.href='www.somesite'. By doing so, after logging in to Jira , it redirected to the particular site. Therefore i...

iran-banner.com XSS vulnerability

Open Bug Bounty ID: OBB-592217 Description| Value ---|--- Affected Website:| iran-banner.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OS vulnerabilities detected in banner reporting (PCI-DSS check)

A service banner response from the remote host indicates an OS install at a level that may be vulnerable to one or more vulnerabilities. This plugin only runs when 'Check for PCI-DSS compliance' is enabled in the scan policy. It does not run if local security checks are enabled. It runs off of...

Tuleap 'CVE-2018-7538' SQLi Vulnerability

Tuleap is prone to an SQL injection SQLi vulnerability in the tracker functionality. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Quest DR Series Appliance Detection (HTTP)

HTTP based detection of Quest DR Series pppliances. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Database Server Content Management Component Unspecified Vulnerability-01

Oracle Database Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Icinga 2 Detection (HTTP)

HTTP based detection of Icinga 2. Note: Providing Icinga2 API Credentials can lead to better results. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

NetEx HyperIP Detection Consolidation

Consolidation of NetEx HyperIP virtual appliance detections. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

NetEx HyperIP Detection (SSH Banner)

SSH banner-based detection of a NetEx HyperIP virtual appliance. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...