NetBIOS Name Service Spoofer

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NetBIOS Name Service Spoofer', 'Description' = %q This module forges NetBIOS Name Service NBNS responses. It will listen for NBNS requests sent t...

TrendMicro Data Loss Prevention 5.5 Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TrendMicro Data Loss Prevention 5.5 Directory Traversal', 'Description' = %q This module tests whether a directory traversal vulnerability is...

Advantech WebAccess DBVisitor.dll ChartThemeConfig SQL Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Advantech WebAccess DBVisitor.dll ChartThemeConfig SQL Injection', 'Description' = %q This module exploits a SQL injecti...

The vulnerability of the centralized system for managing user identities in FreeIPA lies in the insufficient calculation of password hashes. This allows attackers to increase their privileges.

The vulnerability of the centralized system for managing user identities in FreeIPA is related to insufficient calculation of password hashes. Exploiting this vulnerability allows a malicious actor to increase their privileges by testing a large number of possible user passwords...

Exploit for SQL Injection in Pricelisto Great_Restaurant_Menu_Wp

CVE-2024-38793-PoC Proof of Concept code for exploitation of C...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

PT-2024-5503

Name of the Vulnerable Software and Affected Versions Microsoft Office versions prior to the fixed version Microsoft Office 2016 Microsoft Office 2019 Microsoft Office LTSC 2021 Microsoft 365 Apps for Enterprise Description A spoofing vulnerability in Microsoft Office allows attackers to affect t...

CVE-2024-38881

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Rainbow Table Password cracking attack due to the use of one-way hashes without salts when storing user passwords...

CVE-2024-38881

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Rainbow Table Password cracking attack due to the use of one-way hashes without salts when storing user passwords...

Horizon Business Services Caterease 安全漏洞

Horizon Business Services Caterease is an event planning and catering software from Horizon Business Services, USA. A security vulnerability exists in Horizon Business Services Caterease versions 16.0.1.1663 through 24.0.1.2405 and later versions, which stems from the use of unsalted unidirection...

CVE-2024-1287

The pmpro-member-directory WordPress plugin before 1.2.6 does not prevent users with at least the contributor role from leaking other users' sensitive information, including password hashes via an SQLi vector...

CVE-2024-1287 Paid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLi

The pmpro-member-directory WordPress plugin before 1.2.6 does not prevent users with at least the contributor role from leaking other users' sensitive information, including password hashes via an SQLi vector...

CVE-2024-1287

CVE-2024-1287 affects the WordPress plugin Pay Memberships Pro - Member Directory Add On (pmpro-member-directory) prior to version 1.2.6. The issue allows users with at least the Contributor role to leak other users’ sensitive information, including password hashes, via an SQL Injection vector. R...

WordPress plugin pmpro-member-directory 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability in...

PT-2024-17770 · Unknown · Pmpro-Member-Directory

Name of the Vulnerable Software and Affected Versions: pmpro-member-directory versions prior to 1.2.6 Description: The issue allows users with at least the contributor role to leak other users' sensitive information, including password hashes. Recommendations: For versions prior to 1.2.6, update ...

CBL Mariner 2.0 Security Update: httpd (CVE-2024-40898)

The version of httpd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-40898 advisory. - SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTM...

The vulnerability of RUGGEDCOM microprogrammed Ethernet switches’ web servers allows attackers to gain unauthorized access to the hash values and passwords of all system users.

The vulnerability of web servers running microprogrammed Ethernet switches from RUGGEDCOM is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the hash values and passwords of all system users...

BIT-APACHE-2024-40898 Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows

SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue...

CVE-2024-40898

A flaw was found in HTTPd on Windows systems. This issue potentially allows NTLM hashes to be leaked via modrewrite in server/vhost context to a malicious server via Server-side request forgery SSRF and malicious requests or content. Mitigation Mitigation for this issue is either not available or...

Mageia: Security Advisory (MGASA-2024-0272)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...