CVE-2014-8607: Exposure of Sensitive Information to an Unauthorized Actor

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command line, which allows local users to obtain sensitive information via the ps command...

Load Scripts Into PowerShell Session

This module will download and execute one or more PowerShell scripts over a present powershell session. Setting VERBOSE to true will show the stager results. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

CVE-2014-9812

ImageMagick allows remote attackers to cause a denial of service NULL pointer dereference via a crafted ps file...

PT-2014-9030 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted ps file. No information is provided about the estimated numbe...

ps-loft9212.coolvds.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-50802 Description| Value ---|--- Affected Website:| ps-loft9212.coolvds.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

Calendar Express 2.0 - SQL Injection Vulnerability

No description provided by source. Calendar Express 2.0 Vulnerability Calendar Express 2.0 Powered by Phplite.com Download:http://script.wareseeker.com/download/calendar-express-2.rar/11517 Author: Baybora Site: www.1923turk.bizhttp://www.1923turk.biz Exploit: POST...

FreeBSD 4.x Process Concealment Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4768/info In FreeBSD, setting kern.psshowallprocs=0 via the sysctl call is meant to disable normal users from seeing any running processes that are not owned by them. The current implementation of this feature fails to...

SGI IRIX <= 6.5.4,Solaris <= 2.5.1 ps(1) Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/220/info The ps command prints information about active processes on a system. Due to insufficient bounds checking on arguments supplied to ps, it is possible to overwrite the internal data space of the ps program. As ps ...

HP-UX 10.x/11.x Aserver PATH Vulnerability

No description provided by source. source : http://www.securityfocus.com/bid/1929/info Aserver is a server program that ships with HP-UX versions 10.x and above that is used to interface client applications with the audio hardware. Because it talks to hardware, it is installed setuid root by...

The Uploader 2.0 - Remote File Upload Vulnerability

No description provided by source. ======================================================================================================= Script Name : The Uploader 2.0 Language : php Author : Master Mind Home : www.vbspiders.com ============================================== Exploit : example:...

Solaris 2.5.0/2.5.1 ps & chkey Data Buffer Exploit

No description provided by source. cat psexpl.po EOF domain SUNWOSTOSCMD msgid usage: %s\n%s\n%s\n%s\n%s\n%s\n%s\n msgstr...

Hide passwords in ps aux for https git tasks

When git checkout tasks configured to use HTTPS run, the user and password are exposed in ps aux: noformat bamboo 15138 0.0 0.0 86752 2224 ? S May20 0:00 git-remote-https https://gituser:[email protected]/scm/consumer/XXXX.git...

CVE-2013-5834

Unspecified vulnerability in Oracle Solaris 8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ps...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ps...

CVE-2013-5834

Unspecified vulnerability in Oracle Solaris 8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ps...

CVE-2013-5834: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ps...

CVE-2013-3244

Multiple unspecified vulnerabilities in the CJDBFILLMEMORYFROMPPB function in the Project System PS-IS module for SAP ERP Central Component ECC allow remote attackers to execute arbitrary code via a 1 RFC or 2 SOAP-RFC request...

CVE-2013-3244: Improper Control of Generation of Code

Multiple unspecified vulnerabilities in the CJDBFILLMEMORYFROMPPB function in the Project System PS-IS module for SAP ERP Central Component ECC allow remote attackers to execute arbitrary code via a 1 RFC or 2 SOAP-RFC request...

CVE-2013-3244

The CVE-2013-3244 entry concerns SAP ERP Central Component (ECC) specifically the Project System (PS-IS) module. The vulnerability affects the CJDB_FILL_MEMORY_FROM_PPB function, with a root cause described as multiple unspecified vulnerabilities that allow remote attackers to execute arbitrary c...

[Nishang v.0.2.7] PowerShell for Penetration Testing

Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security and post exploitation during Penetraion Tests. The scripts are written on the basis of requirement by the author during real Penetration Tests.It contains many interesting script...