Check-vuln-CVE-2019-0708

CVE-2019-0708 Escáner PoC no autenticado de CVE-2019-0708 "BlueKeep" por @JaGoTu y @zerosum0x0. PR del módulo de Metasploit: https://github.com/rapid7/metasploit-framework/pull/11869 En este repositorio Un fork de rdesktop que actúa como escáner y puede detectar si un host es vulnerable a...

CVE-2019-0708-Msf--

CVE-2019-0708 PoC de escáner no autenticado CVE-2019-0708 "BlueKeep" por @JaGoTu y @zerosum0x0. Detalles técnicos: https://zerosum0x0.blogspot.com/2019/05/avoiding-dos-how-bluekeep-scanners-work.html Módulo de Metasploit El módulo de Metasploit ha sido incorporado a rapid7:master. msf5 use...

Trend Micro Control Manager GetPassword() SQLi

The Trend Micro Control Manager running on the remote host is affected by an SQLi vulnerability when processing an HTTP request due to the lack of proper validation of a user-supplied string before using it to construct SQL queries. An unauthenticated, remote attacker can exploit this issue, via ...

On the lookout for Intel AMT CVE-2017-5689

Weve had some inquiries about checks for CVE-2017-5689, a vulnerability affecting Intel AMT devices. On May 5th, 2017, we released a potential vulnerability check that can help identify assets that may be vulnerable. We initially ran into issues with trying to determine the exact version of the...

ManageEngine AssetExplorer < 6.1.0 Build 6113 Multiple XSS

The version of ManageEngine AssetExplorer running on the remote host is prior to 6.1.0 build 6113. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of input to the Publisher name before...

IBM Rational RequisitePro ReqWebHelp Multiple XSS

IBM Rational RequisitePro is installed on the remote host. The installed version contains two JSP scripts that are affected by cross-site scripting vulnerabilities. Specifically, it fails to sanitize input to the 'searchWord', 'maxHits', 'scopedSearch', and 'scope' parameters of 'searchView.jsp'...