ApPHP Hotel Site 3.x.x SQL Injection

ApPHP Hotel site SQLi Vulnerability ApPHP Hotel Site is an Hotel application programs using PHP Language. title : ApPHP Hotel Site v.3.x.x. godork : ".php?pid=" "ApPHP Hotel Site" Affected version : v.3.x.x tested site : http://www.hotelbran.com/index.php?pid=%27null python sqlmap.py -u...

ManageEngine Desktop Central Dcpluginservelet Policy Bypass (CVE-2014-7862)

A policy bypass vulnerability exists in ManageEngine Desktop Central. The vulnerability is due to lack of authentication and insufficient input validation of the parameters sent to the Dcpluginservelet page when processing HTTPS requests...

Cerberus FTP Server HTTP/S Web客户端安全限制绕过漏洞

Cerberus FTP Server是一款适用在Windows操作系统上的FTP服务程序。 Cerberus FTP Server 6.0.7之前版本在HTTP/S web客户端的实现上存在安全漏洞，可被恶意利用泄露服务器上的受限制访问资源。 0 Cerberus FTP Server 6.0.7 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.cerberusftp.com/...

[GoldenEye v2.0] DoS Tool

GoldenEye is a HTTP/S Layer 7 Denial-of-Service Testing Tool. It uses KeepAlive and Connection: keep-alive paired with Cache-Control options to persist socket connection busting through caching when possible until it consumes all available sockets on the HTTP/S server. Usage USAGE: ./goldeneye.py...

[HoneyProxy] A man-in-the-middle SSL Proxy & Traffic Analyzer

HoneyProxy is a lightweight tool that allows live HTTPS traffic inspection and analysis. It focuses on features that are useful for malware analysis and network forensics. Features Analyze HTTPS traffic on the fly Filter and highlight traffic, regex support included. Report Generation for saved...

Joomla Commedia Plugin (index.php, task parameter) SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla commedia Remote Exploit dork: inurl:index.php?option=comcommedia Date: 18-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://www.ecolora.org/ Version: 3.1 last update on Oct 7, 2012 and lowers Licens...

Windows Executable Download and Evaluate VBS

Downloads a file from an HTTPS URL and executes it as a vbs script. Use it to stage a vbs encoded payload from a short command line. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize =...

Sqlmap v.0.9 - automatic SQL injection and database takeover tool !

Sqlmap v.0.9 - automatic SQL injection and database takeover tool ! sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a kick-ass detection engine, many niche features for...

Cisco Network Building Mediator products contain multiple vulnerabilities

Overview Cisco Network Building Mediator NBM products are affected by multiple vulnerabilities that could allow an attacker to gain control of a vulnerable device or to cause a denial of service. Description Cisco Network Building Mediator NBM products are designed to manage facility energy use...

Debian DSA-1410-1 : ruby1.8 - programming error

Several vulnerabilities have been discovered in Ruby, an object-oriented scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5162 It was discovered that the Ruby HTTPS module performs insufficient validation of SSL certificates, whic...

DSA-1411-1 libopenssl-ruby - possible man-in-the-middle attacks

Bulletin has no description...

Classified System [injection sql]

vendor site: http://www.vspin.net/ product :Classified System bug:injection sql risk : medium injection sql : /cat.asp?cat='sql /search.asp?in=y&keyword='sql /search.asp?in=y&keyword=1&submit=Search&order='sql /search.asp?in=y&keyword=1&submit=Search&order=tblclassads.colid&sort='sql...

portixSQL.txt

product:Portix-PHP vendor site :http://portix2.be risk : medium log with : username: 'or''=' passwd : 'or''=' xss post on the forum , vulnerable fields : titre auteur laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

IF-CMS multiples XSS vunerabilities

vendor site: http://www.rhadrix.com/ risk : low xss = /index.php?rns=/titlescriptalertdocument.cookie/script full path array /index.php?rns= /index.php?pag= benjamin mosse & laurent gaffie http://s-a-p.ca/...

[NT] GlobalScape Secure FTP Server Arbitrary Command Overflow ( Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...