4195 matches found
Unable to launch applications externally through Netscaler Gateway, getting internal server IP address in ICA file
Unable to launch application externally through Netscaler Gateway and when checking further we see that we are getting internal server IP address in ICA file rather than "Gateway FQDN:443"...
New Relic: Restricted User can view multiple account details including customer_root_account_id, payment method, date of first payment, etc.
Summary When a restricted user visits this URL: There is a request sent to this URL: https://www.staging-bam.nr-data.net. Within that request leaks the following information about the entire account, that the restricted user can view:...
Description of the security update for Update Rollup 5 for System Center 2012 R2 Virtual Machine Manager
Description of the security update for Update Rollup 5 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 5 for Microsoft System Center 2012 R2 Virtual Machine Manager. This update rollup contains two updates for System...
UBUNTU-CVE-2016-10196
Stack-based buffer overflow in the evutilparsesockaddrport function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service segmentation fault via vectors involving a long string in brackets in the ipasstring argument...
ntop-ng 2.5.160805 Username Enumeration
Exploit title: ntopng user enumeration Author: Dolev Farhi Contact: dolevf at protonmail.com Date: 04-08-2016 Vendor homepage: ntop.org Software version: v.2.5.160805 !/usr/env/python import os import sys import urllib import urllib2 import cookielib server = 'ip.add.re.ss' username = 'ntopng-use...
VMPanel 2.7.4 - SQL Injection Web Vulnerability
Exploit for php platform in category web applications ===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System...
VMPanel 2.7.4 SQL Injection
===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System Exploitation Technique: Remote Severity Level: Medium Tested O...
VMPanel 2.7.4 - SQL Injection Web Vulnerability
Document Title: =============== VMPanel 2.7.4 - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2022 Release Date: ============= 2016-12-14 Vulnerability Laboratory ID VL-ID: ==================================== 2022 Comm...
XFINITY Gateway Technicolor DPC3941T Cross Site Request Forgery
Exploit Title: CSRF XFINITY Gateway product Technicolorpreviously Cisco DPC3941T Date: 12/12/2016 Exploit Author: Ayushman Dutta Version: dpc3941-P20-18-v303r20421733-160413a-CMCST CVE : CVE-2016-7454 The Device DPC3941T is vulnerable to CSRF and has no security on the entire admin panel for it...
Turkish Hackers Are Giving Away Prizes For Participating In DDoS Attacks
DDoS has become a game now that could knock any service offline. A Turkish hacking group is encouraging individuals to join its DDoS-for-Points platform that features points and prizes for carrying out distributed denial-of-service DDoS attacks against a list of predetermined targets. The points...
TP-LINK TD-W8951ND - Denial of Service
Exploit Title: TP-LINK TD-W8951ND - Denial of Service Date: 2016-12-07 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Tested on: Windows AND Linux Demo Construction : https://youtu.be/7mvrW3mtVE !/usr/bin/python import urllib site=rawinput"Enter IP Address : " if...
Mozilla Patches Firefox Zero Day Used to Unmask Tor Browser Users
As expected, Mozilla released a new version of Firefox on Wednesday to address a zero-day vulnerability that was actively being exploited to de-anonymize Tor Browser users. The vulnerability, disclosed on a public Tor Project mailing list late Tuesday night, forced the Tor Project to also issue a...
CVE-2016-9752
In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address e.g., http://127.1 or a 30x aka Redirection HTTP status code...
Server side request forgery (ssrf)
In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address e.g., http://127.1 or a 30x aka Redirection HTTP status code...
NEET - Network Enumeration and Exploitation Tool
Neet is a flexible, multi-threaded tool for network penetration testing. It runs on Linux and co-ordinates the use of numerous other open-source network tools, with the aim of gathering as much network information as possible in clear, easy-to-use formats. The core scanning engine finds and...
OpenGB 1.2.3 Cross Site Scripting
OpenGB version 1.2.3 Cross Site Scripting XSS Vulnerability ================================================================= Discovered by NA, NAattutanota.com ====================================== Description ============ A simple PHP MySQL website guestbook, user friendly and easily...
OpenGB 1.2.3 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications OpenGB version 1.2.3 Cross Site Scripting XSS Vulnerability ================================================================= Discovered by NA, NAattutanota.com ====================================== Description ============ A simple PHP MySQL...
PCMan FTP Server 2.0.7 - 'PORT' Command Buffer Overflow Exploit
Exploit for windows platform in category remote exploits !/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0 PORT Command BoF Exploit Author: Pablo González Date: 4/11/2016 Software: PCMan 2.0 Tested on: Windows XP Profesional SP3 Spanish x86 import socket print "Creating...
Hijacking NodeMCU Development Board-vulnerability warning-the black bar safety net
Long before the want to play the Board, The do nothing poor and can't afford it. Just the school issued a NodeMCU, although it is a cheap Board, play play is also good. This Board also let me play for several days, a start is to build a good car, in teacher to a Scratch on the play for a moment,...
Nymaim Dropper Updates Delivery, Obfuscation Methods
A new variant of the Nymaim dropper has been identified that includes updated delivery and obfuscation methods, and the use of PowerShell routines to download its payloads. The updated dropper, used primarily to download banking Trojans in the past, has also been spreading ransomware, according t...