2044 matches found
Aduket - Straight-forward HTTP Client Testing, Assertions Included
Straight-forward HTTP client testing, assertions included! Simple httptest.Server wrapper with a little request recorder spice on it. No special DSL, no complex API to learn. Just create a server and fire your request like an Hadouken then assert them. TODO Add example usages Add docs Add respons...
Centreon 19.10.5 - (Pollers) Remote Command Execution Exploit
Exploit for php platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Centreon Poller Authenticated Remote Command Execution', 'Description' = %q TODO , 'Author'...
Huawei EulerOS: Security Advisory for python (EulerOS-SA-2017-1186)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python (EulerOS-SA-2019-1434)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for java-1.8.0-openjdk (EulerOS-SA-2017-1073)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1099)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Python Twisted trustRoot is not respected in HTTP client
Python Twisted 14.0.0 trustRoot is not respected in HTTP client...
GHSA-3C45-WGJP-7V9R Python Twisted trustRoot is not respected in HTTP client
Python Twisted 14.0.0 trustRoot is not respected in HTTP client...
Citrix ADC (NetScaler) Directory Traversal RCE
This module exploits a directory traversal in Citrix Application Delivery Controller ADC, aka NetScaler, and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0, to execute an arbitrary command payload. Module Options msf use exploit/freebsd/http/citrix/dirtraversalrce msf undefineddirtraversalrce show...
Metasploit Sample Webapp Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This exploit sample shows how an exploit module could be written to exploit a bug in an arbitrary web server class MetasploitModule 'Sample Webapp Exploit', 'Description...
OpenNetAdmin 18.1.1 - Command Injection Exploit (Metasploit)
OpenNetAdmin 18.1.1 - Command Injection Exploit Metasploit class MetasploitModule 'OpenNetAdmin Ping Command Injection', 'Description' = %q This module exploits a command injection in OpenNetAdmin between 8.5.14 and 18.1.1. , 'Author' = 'mattpascoe', Vulnerability discovery 'Onur ER ' Metasploit...
OpenNetAdmin 18.1.1 - Command Injection Exploit #RCE
Exploit for php platform in category web applications class MetasploitModule 'OpenNetAdmin Ping Command Injection', 'Description' = %q This module exploits a command injection in OpenNetAdmin between 8.5.14 and 18.1.1. , 'Author' = 'mattpascoe', Vulnerability discovery 'Onur ER ' Metasploit modul...
Ajenti 2.1.31 Command Injection Exploit
This Metasploit module exploits a command injection in Ajenti version 2.1.31. By injecting a command into the username POST parameter to api/core/auth, a shell can be spawned. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
DEBIAN-CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...
Design/Logic Flaw
Python Twisted 14.0 trustRoot is not respected in HTTP client...
CVE-2014-7143
Python Twisted 14.0 trustRoot is not respected in HTTP client...