New Nessus 7 Professional and the end of cost-effective Vulnerability Management (as we knew it)

It's an epic and really sad news. When people asked me about the cost-effective solution for Vulnerability Management I usually answered: "Nessus Professional with some additional automation through Nessus API". With just a couple of Nessus Professional scanning nodes it was possible to scan all...

CVE-2017-17625

Professional Service Script 1.0 has SQL Injection via the service-list city parameter...

CVE-2017-17625

Professional Service Script 1.0 has SQL Injection via the service-list city parameter...

Sql injection

Professional Service Script 1.0 has SQL Injection via the service-list city parameter...

CVE-2017-17625

CVE-2017-17625 concerns PHP Scripts Mall Professional Service Script 1.0, where the SQL injection vulnerability exists in the service-list endpoint via the city parameter. The root cause is an injectable SQL query exposed by the city input, enabling an attacker to manipulate the database. Public ...

CVE-2017-17625

Professional Service Script 1.0 has SQL Injection via the service-list city parameter...

Professional Service Script 1.0 SQL Injection

Exploit Title: Professional Service Script 1.0 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/professional-service-script/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

Professional Service Script 1.0 - service-list?city SQL Injection

Professional Service Script 1.0 - service-list?city SQL Injection Exploit Title: Professional Service Script 1.0 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/professional-service-script/ Version:...

Cimetrics BACnet Explorer 4.0 XXE Vulnerability

Summary The BACnet Explorer is a BACnet client application that helps auto discover BACnet devices. Description BACnetExplorer suffers from an XML External Entity XXE vulnerability using the DTD parameter entities technique resulting in disclosure and retrieval of arbitrary data on the affected...

Professional Service Script 1.0 - service-list?city SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Professional Service Script 1.0 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/professional-service-script/ Version: 1.0 Category...

Professional Service Script 1.0 - 'service-list?city' SQL Injection

Exploit Title: Professional Service Script 1.0 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/professional-service-script/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

Ipswitch WS_FTP Professional < 12.6.0.3 Local Buffer Overflow Vulnerability

Ipswitch WSFTP Professional is prone to a local buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ipswitch WS_FTP Professional < 12.6.0.3 - Local Buffer Overflow (SEH) Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python Title: Ipswitch WSFTP Professional Local Buffer Overflow SEH Author: Kevin McGuigan. Twitter: @h3xagram Author Website: https://www.7elements.co.uk Vendor Website: https://www.ipswitch.com Date: 03/11/2017 Version: 12.6.03 CVE:...

Buffer overflow

Ipswitch WSFTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729...

CVE-2017-16513

Ipswitch WSFTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729...

Ipswitch WS_FTP Professional 12.6.0.3 - Local Buffer Overflow (SEH)

Ipswitch WSFTP Professional 12.6.0.3 - Local Buffer Overflow SEH !/usr/bin/python Title: Ipswitch WSFTP Professional Local Buffer Overflow SEH Author: Kevin McGuigan. Twitter: @h3xagram Author Website: https://www.7elements.co.uk Vendor Website: https://www.ipswitch.com Date: 03/11/2017 Version:...

Ipswitch WS_FTP Professional < 12.6.0.3 - Local Buffer Overflow (SEH)

!/usr/bin/python Title: Ipswitch WSFTP Professional Local Buffer Overflow SEH Author: Kevin McGuigan. Twitter: @h3xagram Author Website: https://www.7elements.co.uk Vendor Website: https://www.ipswitch.com Date: 03/11/2017 Version: 12.6.03 CVE: CVE-2017-16513 Tested on: Windows 7 32-bit Use scrip...

IBM Daeja ViewONE Denial of Service Vulnerability

IBM Daeja ViewONE is a document viewer from IBM that supports TIFF, PDF, and Office-based documents.IBM Daeja ViewONE Virtual, Daeja ViewONE Standard, and Daeja ViewONE Professional are its different Daeja ViewONE Virtual, Daeja ViewONE Standard and Daeja ViewONE Professional are different...

IBM Daeja ViewONE Information Disclosure Vulnerability

IBM Daeja ViewONE is a document viewer from IBM that supports TIFF, PDF and Office-based documents.IBM Daeja ViewONE Virtual, Daeja ViewONE Standard and Daeja ViewONE Professional are its different Daeja ViewONE Virtual, Daeja ViewONE Standard and Daeja ViewONE Professional are different versions...

CVE-2017-1209

CVE-2017-1209 affects IBM Daeja ViewONE Professional, Standard and Virtual (versions 4.1.5.1 and 5.0.2 in scope). The underlying issue is a cross-site scripting flaw that allows an attacker to embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted...