XAMPP WebDAV PHP Upload

This module exploits weak WebDAV passwords on XAMPP servers. It uses supplied credentials to upload a PHP payload and execute it. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'XAMPP WebDAV PH...

XAMPP WebDAV PHP Upload

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'XAMPP WebDAV...

Plone and Zope - Remote Command Execution

Exploit Title: Plone - Remote Command Execution Date: 12/21/2011 Author: Nick Miles www.npenetrable.com Tested on: 12/21/2011 CVE : CVE-2011-3587 Versions Affected without hotfix: Plone 4.0 through 4.0.9; Plone 4.1; Plone 4.2 a1 and a2; Zope 2.12.x and Zope 2.13.x. Versions Not Affected: Versions...

FFFTP < 1.98d Untrusted Search Path Vulnerability (Dec 2011) - Windows

FFFTP is prone to untrusted search path vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft PowerPoint OfficeArt远程代码执行漏洞(MS11-094)

BUGTRAQ ID: 50964 CVE ID: CVE-2011-3413 PowerPoint是一个由Microsoft公司开发的演示文稿程序，是Microsoft Office系统中的其中一个组件。它支持Microsoft WindowsApple的Mac OS X操作系统。 PowerPoint处理特制.ppt文件的方式中存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码。 Microsoft Office 2008 for Mac Microsoft Office 2007 Microsoft PowerPoint 2007 临时解决方法：...

FFFTP Untrusted Search Path Vulnerability (Windows) - Dec 11

The host is running FFFTP and is prone to untrusted search path vulnerability. OpenVAS Vulnerability Test $Id: secpodffftpuntrustedsearchpathvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ FFFTP Untrusted Search Path Vulnerability Windows - Dec 11 Authors: Madhuri D Copyright: Copyright c 2011 SecPo...

Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2639142)

This host is missing an important security update according to Microsoft Bulletin MS11-094. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows Mail and Windows Meeting Space Remote Code Execution Vulnerability (2620704)

This host is missing an important security update according to Microsoft Bulletin MS11-085. OpenVAS Vulnerability Test $Id: secpodms11-085.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Mail and Windows Meeting Space Remote Code Execution Vulnerability 2620704 Authors: Antu Sanadi Copyright:...

Microsoft Windows TrueType字体解析拒绝服务漏洞(MS11-084)

CVE ID: CVE-2011-2004 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在安全漏洞，可被恶意用户利用造成拒绝服务。 此漏洞源于在解析TrueType字体文件时Win32k.sys中存在的数组索引错误，可通过诱使用户浏览包含特制TrueType字体文件的WebDAV或网络共享利用此漏洞。 Microsoft Windows Server 2008 Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（ms11-084）以及相应补丁:...

Windows Mail/Meeting Space不安全库加载漏洞(MS11-085)

CVE ID: CVE-2011-2016 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在安全漏洞，可被恶意用户利用控制受影响系统。 此漏洞源于Windows Mail和Windows Meeting Space以不安全方式加载某些库，通过诱使用户打开远程WebDAV或SMB共享上的EML或WCLNV文件加载任意库。 0 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7 厂商补丁： Microsoft ---------...

Apple Safari file:// Arbitrary Code Execution

$Id: safarifilepolicy.rb 13967 2011-10-17 03:49:49Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Apple Safari - 'file://' Arbitrary Code Execution (Metasploit)

$Id: safarifilepolicy.rb 13967 2011-10-17 03:49:49Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2011-3213

The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate fo...

Code injection

The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate fo...

CVE-2011-3213

The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate fo...

CVE-2011-3213

The CVE-2011-3213 issue affects Apple Mac OS X File Systems prior to 10.7.2. It concerns how WebDAV HTTPS certificates are tracked: if a user accepts a certificate for the initial connection, a MITM attacker could later present a different certificate to hijack the connection. The root cause is i...

Apple Safari file:// Arbitrary Code Execution

This module exploits a vulnerability found in Apple Safari on OS X platform. A policy issue in the handling of file:// URLs may allow arbitrary remote code execution under the context of the user. In order to trigger arbitrary remote code execution, the best way seems to be opening a share on the...

Microsoft Active Accessibility DLL Loading Remote Code Execution (MS11-075; CVE-2011-1247)

A remote code execution vulnerability has been reported in Microsoft Windows Active Accessibility component. The vulnerability is due to an error in the way certain applications using OleAut32.dll handle the loading of DLL files. A remote attacker may exploit this vulnerability by enticing a user...

Microsoft Windows Multiple COM Binary Planting Vulnerabilities (MS11-076; CVE-2011-1991; CVE-2011-2009)

The vulnerabilities are due to the way Windows COM servers improperly restrict the paths used when loading external libraries. A remote attacker may exploit these vulnerabilities by enticing an unsuspecting user to open a specially crafted file from a WebDAV or an SMB shareSuccessful exploitation...

Mozilla Firefox and Thunderbird sensor.dll Insecure Library Loading (CVE-2011-2980)

A remote code execution vulnerability has been reported in Mozilla Firefox and Thunderbird. The vulnerability is due to insecure library loading while opening specially crafted HTML files. A remote attacker may trigger this vulnerability by enticing a target user to open a malicious HTML file fro...