Nexpose Dimensional Data Warehouse and Reporting Data Model: What's the Difference?

The Data Warehouse Export recently added support for a Dimensional Model for its export schema. This provides a much more comprehensive, accessible, and scalable model of data than the previous now referred to as "Legacy" model. The foundation for this dimensional model is the same as the Reporti...

Linux/x86 - Egg-hunter Shellcode (25 bytes)

/ ;author: Filippo "zinzloun" Bersani ;date: 25/11/2016 ;version 1.0 ;purpose: different approach with fnstenv technique, changed the usual pattern to find the egg mark ;X86 Assembly/NASM Syntax ;tested on: Linux OpenSuse001 2.6.34-12-desktop 32bit ; Linux ubuntu 3.13.0-100-generic...

VLC Media Player Version Detection

Binary data 9796.prm...

Alienvault OSSIM/USM 5.3.1 Cross Site Scripting

Details ======= Product: Alienvault OSSIM/USM Vulnerability: Reflected XSS Author: Peter Lapp, lappsec gmail com CVE: CVE-2016-8583 Vulnerable Versions: body+onpageshow%3d"alert0 For the targets param the payload is slightly different. Timeline ======== 08/03/16 - Reported to Vendor 10/03/16 -...

CVE-2016-7964: Server-Side Request Forgery (SSRF)

The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and...

Exploit for Race Condition in Canonical Ubuntu_Linux

Dirty Cow Kernel Checker Scan vuls kernel CVE-2016-5195 - DirtyC...

CVE-2016-8583

Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulnerable to reflected XSS...

Cross site scripting

Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulnerable to reflected XSS...

CVE-2016-8583

CVE-2016-8583 affects AlienVault OSSIM/USM prior to version 5.3.2. The vulnerability is a reflected XSS in the vulnerability scan scheduler where multiple GET parameters (e.g., jobname, timeout, sched_id, targets[]) in /ossim/vulnmeter/sched.php can reflect attacker-supplied input. The issue stem...

CVE-2016-8583: Improper Neutralization of Input During Web Page Generation

Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulnerable to reflected XSS...

PT-2016-7512

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM and USM versions prior to 5.3.2 Description The vulnerability scan scheduler in AlienVault OSSIM and USM contains a reflected XSS issue due to multiple vulnerable GET parameters. Recommendations For versions prior to 5.3.2,...

MS16-128: Security update for Adobe Flash Player: October 27, 2016

None None...

Cisco Host Scan HostScan Engine Cross-Site Scripting Vulnerability

Cisco Adaptive Security Appliances Web VPN is a set of modules for configuring Web VPN on ASA firewalls. A cross-site scripting vulnerability in the HostScan Engine in the Cisco Host Scan package used by Cisco Adaptive Security Appliances Web VPN allows remote attackers to exploit the vulnerabili...

Jenkins Plugin Download Detection

Binary data 9658.prm...

Syhunt ScanTools - Console Web Vulnerability Scan Tools

Syhunt released the new generation of its console-based scan tools, simply called ScanTools. The first release of ScanTools comes with four console applications: - ScanURL ,ScanCode , ScanLog and ScanConf , incorporating the functionality of the scanners Syhunt Hybrid/Dynamic, Syhunt Code, Syhunt...

CVE-2016-6436

Cross-site scripting XSS vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682...

CVE-2016-6436

Cross-site scripting XSS vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682...

CVE-2016-6436: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682...

PT-2016-6910

Name of the Vulnerable Software and Affected Versions Cisco Host Scan package HostScan Engine versions 3.0.08062 through 3.1.14018 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This can be exploited by sending a...

Cisco Host Scan Package Cross-Site Scripting Vulnerability

A vulnerability in the Cisco Host Scan package could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of a Cisco Adaptive Security Appliance ASA Web VPN deployment. The vulnerability is due to insufficient input validation of a user-supplied...