CVE-2017-6465

creationtimestamp| type| source ---|---|--- 2017-03-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41511 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/ftpshell51pwdreply.rb 2025-10-23 21:12:58+00:00| see...

cics-user-brute NSE Script

CICS User ID brute forcing script for the CESL login screen. Script Arguments cics-user-brute.commands Commands in a semi-colon separated list needed to access CICS. Defaults to CICS. brute.credfile, brute.delay, brute.emptypass, brute.firstonly, brute.guesses, brute.mode, brute.passonly,...

CVE-2017-2986

creationtimestamp| type| source ---|---|--- 2017-02-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41423 2017-02-22 12:34:18+00:00| published-proof-of-concept| https://t.me/canyoupwnme/817...

CVE-2016-7288

creationtimestamp| type| source ---|---|--- 2017-02-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41357 2017-05-02 17:40:03+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/4664 2024-10-29 18:47:37+00:00| published-proof-of-concept|...

How to determine the version of Citrix license server installed

This article describes how to determine the version of the Citrix license server...

Faraday v2.3 - Collaborative Penetration Test and Vulnerability Management Platform

Faraday is the Integrated Multiuser Risk Environment you were looking for! It maps and leverages all the knowledge you generate in real time, letting you track and understand your audits. Our dashboard for CISOs and managers uncovers the impact and risk being assessed by the audit in real-time...

DNS Poisoning Attacks Made Easy: Judas DNS

DNS Poisoning Attacks Made Easy A DNS proxy server built to be deployed in place of a taken over nameserver to perform targeted exploitation. Judas works by proxying all DNS queries to the legitimate nameservers for a domain. The magic comes with Judas’s rule configurations which allow you to...

Multi-Architecture GDB Enhanced Features for Exploiters & Reverse-Engineers: GEF

Multi-Architecture GDB Enhanced Features for Exploiters & Reverse-Engineers GEF is a kick-ass set of commands for X86, ARM, MIPS, PowerPC and SPARC to make GDB cool again for exploit dev. It is aimed to be used mostly by exploiters and reverse-engineers, to provides additional features to GDB usi...

CVE-2017-2353

creationtimestamp| type| source ---|---|--- 2017-01-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41164...

CVE-2017-2360

creationtimestamp| type| source ---|---|--- 2017-01-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41165 2026-07-26 07:02:10+00:00| seen| https://t.me/KaitNews/2791 2026-07-27 00:01:50+00:00| seen| https://t.me/KaitNews/2791 2026-08-05 19:00:05+00:00| seen|...

Fedora 24 : gd (2017-2717b02630)

Version 2.2.4 - 2017-01-18 Security - gdImageCreate doesn't check for oversized images and as such is prone to DoS vulnerabilities. CVE-2016-9317 - double-free in gdImageWebPtr CVE-2016-6912 - potential unsigned underflow in gdinterpolation.c - DOS vulnerability in gdImageCreateFromGd2Ctx Fixed -...

Fedora 25 : gd (2017-bab5698540)

Version 2.2.4 - 2017-01-18 Security - gdImageCreate doesn't check for oversized images and as such is prone to DoS vulnerabilities. CVE-2016-9317 - double-free in gdImageWebPtr CVE-2016-6912 - potential unsigned underflow in gdinterpolation.c - DOS vulnerability in gdImageCreateFromGd2Ctx Fixed -...

JudasDNS - Nameserver DNS poisoning attacks made easy

A DNS proxy server built to be deployed in place of a taken over nameserver to perform targeted exploitation. Judas works by proxying all DNS queries to the legitimate nameservers for a domain. The magic comes with Judas's rule configurations which allow you to change DNS responses depending on...

MC Documentation Creator SQL Injection Vulnerability

MC Documentation Creator is a PHP document creation script . A SQL injection vulnerability exists in MC Documentation Creator. Due to poor parameter filtering in this PHP script, an attacker can exploit the vulnerability to obtain sensitive data...

Starbucks: Lack of Controls Allowing for Card and PIN Enumeration Leading to Fraud

Summary: The pages https://www.starbucks.com/account/card/addcard and https://www.starbucks.com/account/card/Balance do not properly enforce security controls to limit POST requests. This bug allows attackers to successfully hijack a loaded Starbucks card and transfer all the funds into their own...

MC Documentation Creator Script - SQL Injection

MC Documentation Creator Script - SQL Injection Vulnerability: SQL Injection Web Vulnerability Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Documentation Creator Script Buy Now: http://microcode.ws/product/mc-documentation-creator-php-script/3890 Author: İhsan Şencan...

aSc Timetables 2017 - Local Buffer Overflow

aSc Timetables 2017 - Local Buffer Overflow Exploit Title: aSc Timetables 2017 input field buffer overflow and code execution Date: 2017-01-12 Exploit Author: Peter Baris Exploit code: http://saptech-erp.com.au/resources/Timetables.zip Exploit documentation:...

Fedora 25 : libpng10 (2016-a4b06a036b)

This update fixes an old NULL pointer dereference bug in pngsettext2 discovered and patched by Patrick Keshishian CVE-2016-10087. The potential 'NULL dereference' bug has existed in libpng since version 0.71 of June 26, 1995. To be vulnerable, an application has to load a text chunk into the png...

Fedora 24 : libpng10 (2016-1a7e14d084)

This update fixes an old NULL pointer dereference bug in pngsettext2 discovered and patched by Patrick Keshishian CVE-2016-10087. The potential 'NULL dereference' bug has existed in libpng since version 0.71 of June 26, 1995. To be vulnerable, an application has to load a text chunk into the png...

[SECURITY] Fedora 25 Update: php-zendframework-zend-mail-2.7.2-1.fc25

Zend\Mail provides generalized functionality to compose and send both text and MIME-compliant multipart email messages. Mail can be sent with Zend\Mail via the Mail\Transport\Sendmail, Mail\Transport\Smtp or the Mail\Transport\File transport. Of course, you can also implement your own transport b...