Monsta FTP Detection (HTTP)

HTTP based detection of Monsta FTP. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.806051";...

CVE-2015-4318

Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a GET request, aka Bug ID CSCuv40528...

CVE-2015-4318

Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a GET request, aka Bug ID CSCuv40528...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Finesse 10.51 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug IDs CSCuq82322, CSCut95853, and CSCuq73975...

某图书馆检索系统通用SQL注射

简要描述： RT 详细说明： Google:inurl:/opac/index.jsp 在以及单位这里抓包 GET /lt/dzgl/dzxxgl/getejdw.jsp?yjdw=00000030 HTTP/1.1 Accept: / Accept-Language: zh-CN User-Agent: Mozilla/4.0 compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/8.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR...

浪潮某政府系统通用SQL注入24处打包

简要描述： ... 详细说明： 某政府系统通用SQL注入24处打包。 案例：（23处GET注入+1处POST注入） 23处GET注入： http://www.whaac.gov.cn:8080/BusinessRegistration/BRProjectList.aspx?page=1&procode= http://www.cfdonline.org.cn/OutPortalCFD//BusinessRegistration/BRProjectList.aspx?page=1&procode=...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine ISE 1.21.198 and 1.30.876 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug ID CSCus16052...

CVE-2015-4268

Multiple cross-site scripting XSS vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine ISE 1.21.198 and 1.30.876 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug ID CSCus16052...

Cisco IP Communicator Denial of Service Vulnerability

Cisco IP Communicator is a suite of Windows PC-based softphone applications from Cisco. The program supports access to company phones, voicemail, etc. via a USB headset or USB speakerphone. A security vulnerability exists in Cisco IP Communicator version 8.64. A remote attacker could exploit this...

D-Link DNS Devices Authentication Bypass Vulnerability

Authentication bypass vulnerability in D-Link DNS devices. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:dlink";...

CVE-2015-4218

The web-based user interface in Cisco Jabber through 9.63 and 9.7 through 9.75 on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858...

Design/Logic Flaw

The web-based user interface in Cisco Jabber through 9.63 and 9.7 through 9.75 on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858...

CVE-2015-4218

The web-based user interface in Cisco Jabber through 9.63 and 9.7 through 9.75 on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858...

Marktplaats: Content Spoofing - http://aanbieding.marktplaats.nl/wp-admin/admin-ajax.php

Hello, Content spoofing, also referred to as content injection or virtual defacement, is an attack targeting a user made possible by injection vulnerability in a web application. When an application does not properly handle user supplied data, an attacker can supply content to a web application,...

Offiria Open Source Enterprise Social Network Remote Detection

Detects the installed version of Offiria Open Source Enterprise Social Network. This script sends an HTTP GET request and tries to confirm the application from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

CVE-2015-3950

Cross-site request forgery CSRF vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request...

CVE-2015-3950

CVE-2015-3950 is a CSRF vulnerability in XZERES 442SR OS (Wind Turbine 442SR) that allows a remote attacker to hijack the admin’s session by using a crafted GET request to switch the default admin user. Affected component: the 442SR OS web interface; root cause reported as CSRF via GET leading to...

CVE-2015-3950

Cross-site request forgery CSRF vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request...

NetCharts Server Version Detection

Detects the installed version of Visual Mining NetCharts Server. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...