OpenDocMan 1.2.5 user.php XSS

No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Embedthis Goahead 3.1.3-0 Denial Of Service

Title: Embedthis Goahead Webserver multiple DoS vulnerabilities. Author: 0in Maksymilian Motyl Date: 18.02.2014 Version: 3.1.3-0 Software Link: http://embedthis.com/products/goahead/ Download: https://github.com/embedthis/goahead Tested on: Linux x32 Description: "GoAhead is embedded in hundreds ...

CVE-2014-1214

creationtimestamp| type| source ---|---|--- 2013-12-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39088 2024-02-13 13:31:19+00:00| seen| https://t.me/ctinow/183802...

JBoss AS Attacks Up Since Exploit Code Disclosed

Attackers are exploiting a two-year-old vulnerability in JBoss Application Servers that enables a hacker to remotely get a shell on a vulnerable webserver. The number of infections has surged since exploit code called pwn.jsp was publicly disclosed Oct. 4. Researchers at Imperva said that a numbe...

CVE-2013-5701

creationtimestamp| type| source ---|---|--- 2013-09-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38752...

o2micro minica_down.php 任意文件下载漏洞

网御神州、天融信、美国凹凸等vpn设备开发疑似源于同一套技术，其中的"/minicadown.php"文件可以再下载其它任意文件 网御神州、天融信、美国凹凸等vpn设备...

[Mercury v2.2.0] The Android Assessment Framework

Mercury is a security assessment framework for the Android platform. It allows you to dynamically interact with the Inter-Process Communication IPC endpoints exported by an application installed on a device. Mercury provides similar functionality to a number of static analysis tools, such as aapt...

TP-LINK Admin Panel Multiple CSRF Vulnerabilities

Exploit for hardware platform in category web applications Advisory Name: Multiple Cross Site Request Forgery vulnerabilities in TP-LINK Admin Panel Internal Cybsec Advisory Id: 2013-0208-Multiple CSRF vulnerabilities in TP-LINK Vulnerability Class: Cross Site Request Forgery CSRF Release Date:...

Winlog Lite SCADA HMI system - Overwrite (SEH)

Winlog Lite SCADA HMI system - Overwrite SEH Vuln Title: Winlog Lite SCADA HMI system SEH 0verwrite Vulnerability Author: FaryadR a.k.a Ciph3r tested on : winXp sp3 and Winlog Lite 2.06.17 Version Twitter : https://twitter.com/faryadR Mail : [email protected] Website : http://0c0c0c0c.com...

Black Hole Exploit Kit Targeting Java CVE-2012-1723 Flaw

A new fork of the Black Hole exploit kit is making quick work of a recently patched Java vulnerability and security researchers say that the attackers are registering new sites quickly to exploit users with vulnerable browsers. The CVE-2012-1723 Java vulnerability that the Black Hole exploit kit ...

NeoAxis Web Player Zip File Directory Traversal Vulnerability

This host is installed with NeoAxis Web Player and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbneoaxiswebplayerzipfiledirtravvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ NeoAxis Web Player Zip File Directory Traversal Vulnerability Authors: Sooraj KS Copyright...

w3af v.1.1 - Web Application Attack and Audit Framework Released

w3af v.1.1 - Web Application Attack and Audit Framework Released w3af is a Web Application Attack and Audit Framework. The project's goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. To read our short and long term objectives. w3af i...

w3af v.1.1 - Web Application Attack and Audit Framework Released

w3af v.1.1 - Web Application Attack and Audit Framework Released w3af is a Web Application Attack and Audit Framework. The project's goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. To read our short and long term objectives. w3af i...

Google: Most Vulnerabilities Only Exploited For a Short Time

Google has a hugely privileged view of the Internet and it uses that position for all kinds of things, one of which is to collect data and intelligence on malicious Web site behavior and malware trends. In a new report based on four years’ worth of data on site and malware activity, the company...

MyBB MyTabs Plugin - SQL Injection

===================================================================== MyBB 0day \ MyTabs plugin SQL injection vulnerability ===================================================================== Exploit title : MyBB 0day \ MyTabs plugin SQL injection vulnerability. Author: AutoRUN & dR.sqL Home :...

CVE-2011-1752

The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...

GoldenFTP 4.70 PASS Stack Buffer Overflow

Exploit for windows platform in category remote exploits $Id: goldenftppassbof.rb 12812 2011-06-02 01:10:22Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...

AT-TFTP Server 1.8 - Read Request Remote Denial of Service

AT-TFTP Server 1.8 - Read Request Remote Denial of Service source: https://www.securityfocus.com/bid/47561/info AT-TFTP is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate...

WordPress Zotpress 2.6 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress Zotpress 2.6 Vulnerability...........Reflected Cross-site Scripting Download................http://katieseaborn.com/plugins/ Release Date............2/23/2011 Tested On...............Windows...

diafan.cms 4.3 - Multiple Vulnerabilities

Vulnerability ID: HTB22777 Reference: http://www.htbridge.ch/advisory/xsrfcsrfindiafancms.html Product: diafan.CMS Vendor: Diafan http://www.diafan.ru/ Vulnerable Version: 4.3 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...