1438 matches found
Researchers Expose Security Flaw in Internet-Ready HDTVs
Researchers at Mocana, a security technology firm in San Francisco, recently demonstrated the ease with which they could hack into a popular Internet-ready HDTV model. They exploited a vulnerability in the software that displays websites on the TV, allowing them to control the information sent to...
Well-known SSL Certificate Used in Remote Device
The X.509 certificate of the remote host is known to be shipping by default with the remote service / device. The private key for this cert has been published, therefore the SSL communications done with the remote host can not be considered as being secret as anyone with the ability to snoop the...
Dell Integrated Remote Access Controller (iDRAC) Web Interface Detection
The web interface for Dell Integrated Remote Access Controller iDRAC, formerly known as Dell Remote Access Controller DRAC, was detected on the remote host. C Tenable, Inc. Thanks to Jason Haar for his help! include'compat.inc'; if description scriptid51185; scriptversion"1.32";...
Update : Havij v1.13 automated SQL Injection tool - New version
Update : Havij v1.13 automated SQL Injection tool - New version "Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page. It can take advantage of a vulnerable web application. By using this software user can perform...
IPSwitch WhatsUp Gold 8.03 - Remote Buffer Overflow (Metasploit)
$Id: ipswitchwugmaincfgret.rb 9820 2010-07-14 13:59:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft Windows 2000 Unsupported Installation Detection
The remote host is running Microsoft Windows 2000. This operating system version is no longer supported by Microsoft. Lack of support implies that no new security patches for the operating system will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C...
BadBlue 2.5 - 'ext.dll' Remote Buffer Overflow (Metasploit)
$Id: badblueextoverflow.rb 9719 2010-07-07 17:38:59Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
NIBE heat pump - Local File Inclusion
NIBE heat pump - Local File Inclusion !/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to Fredrik Nordberg Almroth and Mathias Karlsson for obtaining this information http://h.ackack.net/?p=274...
Fingerprint recognition technology to crack-vulnerability warning-the black bar safety net
Some time ago enrolled in driver training, the results found a crack for fingerprint recognition. Now what all speak of high-tech driver training is certainly no exception, in training on the use of fingerprint attendance machine to record the students on the car of time, reach the predetermined...
HTTP Version Detection
Display version information about each system. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Version Detection', 'Description' = 'Display version information about each system.', 'Author...
InterSystems Cache UtilConfigHome.csp Argument Buffer Overflow
This module exploits a stack buffer overflow in InterSystems Cache 2009.1. By sending a specially crafted GET request, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...
Penetration in the end we should scan what is useful information-vulnerability warning-the black bar safety net
"T． S． T"the Information Security Team'blog If the penetration we need to scan what information? Then the statement could be more, but the routine will scan the following information: 1. The target on the network host IP address 2. The host system can access the UDP or TCP port 3. On the target...
HTTPDX h_handlepeer() Function Buffer Overflow
This module exploits a stack-based buffer overflow vulnerability in HTTPDX HTTP server 1.4. The vulnerability is caused due to a boundary error within the "hhandlepeer" function in http.cpp. By sending an overly long HTTP request, an attacker can overrun a buffer and execute arbitrary code. This...
http-enum NSE Script
Enumerates directories used by popular web applications and servers. This parses a fingerprint file that's similar in format to the Nikto Web application scanner. This script, however, takes it one step further by building in advanced pattern matching as well as having the ability to identify...
HTC Touch vCard over IP Denial of Service PoC Code
Hello, PoC code for testing the MSL-2008-002 vulnerability HTC Touch vCard over IP Denial of Service is now available at: http://poc.mseclab.com/pocs/MSL-2008-002-PoC.py The code provide means for demonstrating the HTC Touch vCard over IP DoS by sending vCards to port UDP/9204 of the target IP...
Bypass Kaspersky Proactive Defense system of the method of discussion-vulnerability warning-the black bar safety net
==Ph4nt0m Security Team== Issue 0x02, Phile 0x08 of 0x0A |=---------------------------------------------------------------------------=| |=-----------------= Bypass Kaspersky Proactive Defense system method discussions=----------------=|...
BIOS Info (SSH)
Using SMBIOS and UEFI, it was possible to get BIOS info. TRUSTED...
ike-scan (NASL wrapper)
ike-scan NASL wrapper This plugin runs ike-scan to identify IPSEC VPN endpoints. It will attempt to enumerate supported cipher suites, bruteforce valid groupnames and fingerprint any endpoint identified. OpenVAS Vulnerability Test $Id: ike-scan.nasl 7153 2017-09-15 15:03:32Z cfischer $ Descriptio...
Fingerprint Authentication Software for Sony Pocket Bit installs hidden folders and files
Overview Fingerprint Authentication Software for Sony Pocket Bit installs hidden folders and files, that is, the folders and files are not visible using ordinary system tools. Some models of Sony Pocket Bit series contain Fingerprint Authentication Software. Fingerprint Authentication Software...