Octopus Deploy Authenticated Code Execution Exploit

This Metasploit module can be used to execute a payload on an Octopus Deploy server given valid credentials or an API key. The payload is executed as a powershell script step on the Octopus Deploy server during a deployment. This module requires Metasploit: http://metasploit.com/download Current...

Octopus Deploy Authenticated Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' require 'json' class MetasploitModule 'Octopus Deploy Authenticated Code Execution', 'Description' = %q This module can be used to...

Octopus Deploy Authenticated Code Execution

This module can be used to execute a payload on an Octopus Deploy server given valid credentials or an API key. The payload is executed as a powershell script step on the Octopus Deploy server during a deployment. Module Options msf use exploit/windows/http/octopusdeploy/deploy msf undefineddeplo...

WikiLeaks Reveals 'AfterMidnight' & 'Assassin' CIA Windows Malware Frameworks

When the world was dealing with the threat of the self-spreading WannaCry ransomware, WikiLeaks released a new batch of CIA Vault 7 leaks, detailing two apparent CIA malware frameworks for the Microsoft Windows platform. Dubbed "AfterMidnight" and "Assassin," both malware programs are designed to...

Octopus Deploy Login Utility

This module simply attempts to login to an Octopus Deploy server using a specific username and password. It has been confirmed to work on version 3.4.4 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...

octopus-versand.de XSS vulnerability

Vulnerable URL: https://www.octopus-versand.de/suche Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 454713 Google Pagerank| 3 VIP website status:| No Chec...

Hirschmann OCTOPUS 8M..., OCTOPUS 16M..., OCTOPUS 24M… 弱口令

参考链接: https://www.neteon.net/media/downloads/IGOctopus8M16M24MPoETrain020708en1.pdf...

CVE-2014-5189

SQL injection vulnerability in lib/optin/optinpage.php in the Lead Octopus plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in lib/optin/optinpage.php in the Lead Octopus plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2014-5189

SQL injection vulnerability in lib/optin/optinpage.php in the Lead Octopus plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2014-5189

Lead Octopus Power is a WordPress plugin affected by an SQL injection in lib/optin/optin_page.php via the id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, potentially compromising data. Public sources (NVD, WPVulnDB, PatchStack) corroborate the SQLi vecto...

PT-2014-6328

Name of the Vulnerable Software and Affected Versions Lead Octopus plugin for WordPress affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the lib/optin/optin page.php file. This can lead to unauthorized access a...

CVE-2014-5189: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in lib/optin/optinpage.php in the Lead Octopus plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

WordPress Lead Octopus Power SQL Injection

Exploit Title : Wordpress Lead-Octopus-Power plugin SQL INJECTION Exploit Author : Ashiyane Digital Security Team vendor Home : http://wordpress.org/ Home : www.Ashiyane.org Security Risk : HIgh Dork : inurl:wp-content/plugins/Lead-Octopus-Power/lib/optin/optinpage.php?id= Location :...

WordPress Lead Octopus Power Plugin - SQL Injection

This WordPress Lead Octopus Power plugin's "id" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

iStockphoto.com's Ravenous Fail Octopus of Death

“Menacing” is probably the word that best describes istockphoto.com’s choice of graphics to adorn its 503 “service unavailable” message. It’s an octopus…that much is clear…but it’s blue. And has a maw full of teeth and dripping blood – presumably from the poor creature it’s just decapitated. Is...

Backdoor Trojan: Octopus 0.1

Backdoor Octopus 0.1 is backdoor Trojan program which opens up a security hole on a victim's computerand is a threat to the security of the user's personal data...