273 matches found
Printer Ready Message Scanner
This module scans for and optionally changes the printer ready message on a set of printers using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class...
PineApp Mail-SeCure livelog.html Arbitrary Command Execution
This Metasploit module exploits a command injection vulnerability on PineApp Mail-SeCure 3.70. The vulnerability exists on the livelog.html component, due to the insecure usage of the shellexec php function. This Metasploit module has been tested successfully on PineApp Mail-SeCure 3.70. This fil...
SAP ConfigServlet - Remote Payload Execution (Metasploit)
SAP ConfigServlet - Remote Payload Execution Metasploit require 'msf/core' class Metasploit3 'SAP ConfigServlet Remote Code Execution', 'Description' = %q This module allows remote code execution via operating system commands through the SAP ConfigServlet without any authentication. , 'Author' =...
SAP SOAP Service RFC_PING Login Brute Forcer
This module attempts to brute force SAP username and passwords through the /sap/bc/soap/rfc SOAP service, using RFCPING function. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module is based on, inspired by, o...
globalSCAPE CuteZIP Stack Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex/zip' class Metasploit3 'globalSCAPE CuteZIP...
Vulnerability in OpenSSL CVE-2010-4180
A flaw in the OpenSSL SSL/TLS server code where an old bug workaround allows malicious clients to modify the stored session cache ciphersuite. In some cases the ciphersuite can be downgraded to a weaker one on subsequent connections. This issue only affects OpenSSL based SSL/TLS server if it uses...
Fedora Core 11 FEDORA-2009-8046 (kdelibs3)
The remote host is missing an update to kdelibs3 announced via advisory FEDORA-2009-8046. OpenVAS Vulnerability Test $Id: fcore20098046.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8046 kdelibs3 Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 11 FEDORA-2009-6972 (poppler)
The remote host is missing an update to poppler announced via advisory FEDORA-2009-6972. OpenVAS Vulnerability Test $Id: fcore20096972.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6972 poppler Authors: Thomas Reinke Copyright: Copyright c 2009...
Unfixed XSS vulnerability at www.findapizza.co.uk
Security researcher rexmundi, has submitted on 19/08/2008 a cross-site-scripting XSS vulnerability affecting www.findapizza.co.uk, which at the time of submission ranked 11582381 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/08/2008. It is...
Fedora 7 : exiv2-0.15-5.fc7 (2007-4591)
Mon Dec 17 2007 Rex Dieter 0.15-5 - CVE-2007-6353 425922 - Tue Sep 18 2007 Rex Dieter 0.15-4 - -libs: -Requires: %name - Tue Aug 21 2007 Rex Dieter 0.15-3 - -libs subpkg to be multilib-friendlier f8+ - Sat Aug 11 2007 Rex Dieter 0.15-2 - License: GPLv2+ - Thu Jul 12 2007 Rex Dieter 0.15-1 -...
Remote file inclusion
PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to imageresize/pages/index.inc.php...
Remote file inclusion
PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the 1 REXINCLUDEPATH parameter in a addons/importexport/pages/index.inc.php and b pages/community.inc.php...
CVE-2006-2843
PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the 1 REXINCLUDEPATH parameter in a addons/importexport/pages/index.inc.php and b pages/community.inc.php...
CVE-2006-2845
CVE-2006-2845 describes a PHP remote file inclusion vulnerability in the Redaxo CMS, affecting versions 3.0 through 3.2. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the REX[INCLUDE_PATH] parameter to image_resize/pages/index.inc.php. The root cause is the ...
CVE-2006-2845
PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to imageresize/pages/index.inc.php...
CVE-2006-2843: Undefined Security Weakness
PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the 1 REXINCLUDEPATH parameter in a addons/importexport/pages/index.inc.php and b pages/community.inc.php...
CVE-2006-2844: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to 1 simpleuser/pages/index.inc.php and 2 stats/pages/index.inc.php...
CVE-2006-2845: Undefined Security Weakness
PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to imageresize/pages/index.inc.php...
CVE-2001-1520
The provided connected records confirm that CVE-2001-1520 affects the Xircom REX 6000 PDA, where local users can obtain the 10‑digit PIN by starting a serial monitor, connecting via Rextools, and capturing the cleartext PIN. The root cause centers on exposing the PIN through local serial access; ...