12021 matches found
Multi Gather Resolve Hosts
Resolves hostnames to either IPv4 or IPv6 addresses from the perspective of the remote host. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Gather Resolve Hosts', 'Description' = %q...
WordPress Woopra Remote Code Execution
WordPress Woopra plugin remote PHP arbitrary code execution exploit. Exploit Title: woopra plugins execute arbitrary PHP code Exploit Google Dork: inurl:/plugins/woopra/inc/php-ofc-library , inurl:wp-content/plugins/woopra/inc/ Date: 06-10-2013 Exploit Author: wantexz Vendor...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0189, CVE-2013-0191. Reason: this identifier was intended for one issue, but it was inadvertently associated with multiple issues. Notes: All CVE users should consult CVE-2013-0189 and CVE-2013-0191 to determine which ID is...
CKFinder 1.4.3 arbitrary file upload vulnerability-vulnerability warning-the black bar safety net
CKFinder is abroad a very popular WYSIWYG text editor,which 1. 4. 3 asp. net version the presence of arbitrary file upload vulnerability attackers can exploit the vulnerability to upload arbitrary files. CKFinder Upload File,force the file name, excluding the suffix, midpoint number, etc. other...
[SECURITY] Fedora 18 Update: python-djblets-0.7.18-1.fc18
A collection of useful classes and functions for Django...
mod_accounting Module 0.5 - Blind SQL Injection
Affected Vendor: http://sourceforge.net/projects/mod-acct/files/ - Affected Software: modaccounting - Affected Version: 0.5. Other earlier versions may be affected. - Issue type: Blind SQL injection - Release Date: 20 Sep 2013 - Discovered by: Eldar "Wireghoul" Marcussen - CVE Identifier:...
HPE Network Node Manager i (NNMi) Detection (credentialed check)
HPE Network Node Manager i NNMi is installed on the remote Windows host. NNMi is a component of HPE Automated Network Management Suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70145; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate",...
Target Longlife Media Player 2.0.2.0 - .wav Crash (PoC)
Target Longlife Media Player 2.0.2.0 - .wav Crash PoC Exploit Title : Target Longlife Media Player Version 2.0.2.0 - .wav - Crash POC Date : 11-09-2013 Exploit Author : gunslinger - http://www.cr0security.com Software Link :...
CS, XSS and FPD vulnerabilities in MCImageManager for TinyMCE
Hello 3APA3A! I want to warn you about vulnerabilities in Moxiecode Image Manager MCImageManager. This is commercial plugin for TinyMCE. It concerns as MCImageManager, as all web applications which have MCImageManager in their bundle. These are Content Spoofing, Cross-Site Scripting and Full Path...
CBHotel Hotel Software and Booking system 1.8 - Multiple Vulnerabilities
Exploit Title: Hotel Software and Booking system 1.8 - SQL Injection / Cross Site Scripting Date: 21 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.cbhotel.eu/ Tested on: Win8 & Linux Mint Affected Version : 1.8 & Anteriores. Contacts...
Convert the SecurityHeadersInterceptor into a filter that applies to /*
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-30356. panel The X-XSS-Protection HTTP header should be sent on all responses with a value of "1; mode=block". As the current...
Convert the SecurityHeadersInterceptor into a filter that applies to /*
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-30356. panel The X-XSS-Protection HTTP header should be sent on all responses with a value of "1; mode=block". As the current...
Several Malicious Android apps found on Google Play affects 25,000 devices
As time goes on, though, the Malware Risk on Mobile Platforms appears to be increasing. A flood of scammy apps that are difficult for Google to detect, and therefore stays available for download for several days before being removed. The Russia-based firm Dr Web today said it has discovered sever...
Brick7 Search Engine Cross Site Scripting
=========================================================== © brick7 2013 Remote code execution XSS =========================================================== Author:Raul DiazDshellnoi Unix Product: Brick7 search engine Web:http://www.brick7.com Versions: N/A Date: 01/06/2013 Vendor Notified:...
D-Link Devices Unauthenticated Remote Command Execution Vulnerability
Different D-Link Routers are vulnerable to OS command injection via the web interface. The vulnerability exists in toolsvct.xgi, which is accessible with credentials. This Metasploit module has been tested with the versions DIR-300 rev A v1.05 and DIR-615 rev D v4.13. Two target are included, the...
WordPress Plugin Booking Calendar 4.1.4 - Cross-Site Request Forgery
WordPress Plugin Booking Calendar 4.1.4 - Cross-Site Request Forgery Exploit Title: CSRF Plugin Booking Calendar 4.1.4 � WordPress Date: 04 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://wpbookingcalendar.com/ Tested on: Win8 & Linux Mint...
[SECURITY] Fedora 17 Update: kde-workspace-4.10.5-3.fc17
The KDE Workspace consists of what is the desktop of the KDE Desktop Environment. This package contains: khotkeys a hotkey daemon klipper a cut & paste history utility kmenuedit the menu editor krunner a command run interface kwin the window manager of KDE plasma the KDE desktop, panels and widge...