SQLMap - Automatic SQL Injection And Database Takeover Tool

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

Oracle BeeHive 2 - 'voice-servlet processEvaluation()' Write File (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Oracle BeeHive 2 voice-servlet processEvaluation Vulnerability", 'Description' = %q This module exploits a vulnerability found in...

Cisco Appliance Admin Default Credentials (SSH)

The remote Cisco Appliance is using known default credentials. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat Outbreak Alert RuleID18835: Email Messages Distributing Malicious Software on November 17, 2015

Medium Alert ID: 41616 First Published: 2015 October 20 20:23 GMT Last Updated: 2015 November 18 14:00 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID1883...

PEframe - Tool to perform static analysis on Portable Executable malware

PEframe is a open source tool to perform static analysis on Portable Executable malware. Usage $ peframe malware.exe $ peframe --option malware.exe Options --json Output in json --import Imported function and dll --export Exported function and dll --dir-import Import directory --dir-export Export...

Threat Outbreak Alert RuleID16404: Email Messages Distributing Malicious Software on July 5, 2015

Medium Alert ID: 39648 First Published: 2015 July 6 13:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16404 may contain the following files: Name | Size...

[SECURITY] Fedora 21 Update: gnome-abrt-1.0.0-3.fc21

A GNOME application allows users to browse through detected problems and provides them with convenient way for managing these problems...

detalleweb.com XSS vulnerability

Open Bug Bounty ID: OBB-59400 Description| Value ---|--- Affected Website:| detalleweb.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

UBUNTU-CVE-2014-9622

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open...

CVE-2014-8791

creationtimestamp| type| source ---|---|--- 2014-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35545 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/tuleapunserializeexec.rb 2025-02-06 03:13:42+00:00|...

All In One Wordpress FW 3.8.3 - Persistent Vulnerability

Document Title: =============== All In One Wordpress FW 3.8.3 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-29 Vulnerability Laboratory ID VL-ID: ====================================...

Mavenlink: Login CSRF

Hi all, Heres the request on the login page POST /login HTTP/1.1 Host: app.mavenlink.com User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64; rv:31.0 Gecko/20100101 Firefox/31.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip,...

nrhz.de XSS vulnerability

Open Bug Bounty ID: OBB-46093 Description| Value ---|--- Affected Website:| nrhz.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

jetAudio 7.1.9.4030 plus vx - (.m3u) Local Stack Overflow (SEH)

No description provided by source. + Vulnerability : jetAudio v 7.1.9.4030 plus vx .m3u Local Stack Overflow + Detected by : HACK4LOVE http://www.milw0rm.com/exploits/9359 + Product : jetAudio + Versions affected : 7.1.9.4030 plus vx +...

Asterisk <= 1.0.12 / 1.2.12.1 (chan_skinny) Remote Heap Overflow (PoC)

No description provided by source. !/usr/bin/perl Beyond Security Copyright Noam Rathaus [email protected] The following proof of concept causes the chanskippy to crash in different locations and due to memory corruption as well as double free calls, this is based on the finding of...

Sophos Web Protection Appliance sblistpack Arbitrary Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Threat Outbreak Alert: Fake Account Transfer Notification Email Messages on February 12, 2014

Medium Alert ID: 32858 First Published: 2014 February 13 17:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a transfer and quote notice for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Secure Message Delivery Notification Email Messages on February 5, 2014

Medium Alert ID: 32730 First Published: 2014 February 5 15:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a secure message for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Product Invoice Notification Email Messages on September 10, 2014

Medium Alert ID: 32697 First Published: 2014 February 4 19:43 GMT Last Updated: 2014 September 11 13:23 GMT Version: 62 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice notification for the recipient. The text in the email...

Threat Outbreak Alert: Fake Photograph Sharing Email Messages on January 17, 2014

Medium Alert ID: 32482 First Published: 2014 January 17 20:27 GMT Last Updated: 2014 January 22 14:59 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a photo for the recipient. The text in the email message attempts to...