8638 matches found
SNMP Enumeration Module
This module allows enumeration of any devices with SNMP protocol support. It supports hardware, software, and network information. The default community used is "public". This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewor...
WikiLeaks
Many people in the security and privacy communities have been aware of the activities of WikiLeaks for several years now, but in 2010 the group hit the mainstream like a hurricane. First came document dumps that revealed embarrassing details about the way the U.S. has conducted the war in Iraq...
Cisco IOS SNMP Configuration Grabber (TFTP)
This module will download the startup or running configuration from a Cisco IOS device using SNMP and TFTP. A read-write SNMP community is required. The SNMP community scanner module can assist in identifying a read-write community. The target must be able to connect back to the Metasploit system...
FBI Uses Facebook to Catch Baltimore Terrorist
Gathering evidence on Facebook has become a standard legal practice, so a social sting operation was inevitable. This method led the Federal Bureau of Investigation FBI to apprehend a would-be terrorist in Baltimore. An FBI informant initially contacted 21-year-old Antonio Martinez after he...
Understanding the Dangers of Stuxnet in Industrial Control Systems
Stuxnet is a sophisticated virus specifically designed to attack supervisory control and data acquisition SCADA systems manufactured by Siemens, a German industrial giant. These systems are commonly used to manage water supplies, power plants, and other industrial facilities, making the worm...
Who are PakBugs Hackers ? Introduction Report by The Hacker News
Report "Who are PakBugs Hackers" by THE HACKER NEWS 1 Jawad Ehsan, nickname - Humza, still at large in Riyadh, Saudi Arabia. Jawad uses codename ZombiEKsa, and is the founder of PakBugs and probably the most famous of all the PakBugs hackers. An Article already posted on him at CBI was actually...
Alex Hutton on the VERIS Community App and Data Breaches
Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...
[SECURITY] Fedora 12 Update: moodle-1.9.10-1.fc12
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
[SECURITY] Fedora 14 Update: moodle-1.9.10-1.fc14
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
MySQL Community Server 5.1 < 5.1.52 Multiple Vulnerabilities
The version of MySQL Community Server 5.1 installed on the remote host is earlier than 5.1.52 and thus potentially affected by multiple vulnerabilities: - An error exists in the handling of 'EXPLAIN' for a 'SELECT' statement from a derived table which can cause the server to crash. 54488 - An err...
[SECURITY] Fedora 13 Update: tomcat6-6.0.26-11.fc13
Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...
[SECURITY] Fedora 12 Update: tomcat6-6.0.26-3.fc12
Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...
iMoveis v1.1 SQL Injection Vulnerability
Exploit for php platform in category web applications ======================================== iMoveis v1.1 SQL Injection Vulnerability ======================================== Date : 26/10/2010 Author : EraGoN Software link : http://baixar7.com/download/acc-imoveis-script-php.rar/3d1e7bf4b9...
quagga bgpd DoS
bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service crash via a malformed 1 OPEN message or 2 a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled...
Joomla Community Builder Enhanced Local File Inclusion
Hello full-disclosure! Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Ris...
LFI / RCE vlunerability in Joomla Community Builder Enhenced (CBE) Component
Hello full-disclosure! Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Ris...
Joomla Community Builder Enhenced Component LFI/RCE Vulnerability
Exploit for php platform in category web applications ======================================================================= Joomla Community Builder Enhenced CBE Component LFI/RCE Vulnerability ======================================================================= Description: Joomla CBE suffe...
MySQL Community Server 5.1 < 5.1.51 Multiple Denial of Service Vulnerabilities
Binary data 801142.prm...
MySQL Community Server 5.1 < 5.1.51 Multiple Denial of Service Vulnerabilities
Binary data 5677.prm...
MySQL Community Server < 5.1.51 Multiple Vulnerabilities
The version of MySQL Community Server installed on the remote host is earlier than 5.1.51 and is, therefore, potentially affected by multiple vulnerabilities: - A privilege escalation vulnerability exists when using statement-based replication. Version specific comments used on a master server wi...