whois-ip NSE Script

Queries the WHOIS services of Regional Internet Registries RIR and attempts to retrieve information about the IP Address Assignment which contains the Target IP Address. The fields displayed contain information about the assignment and the organisation responsible for managing the address space...

whois-domain NSE Script

Attempts to retrieve information about the domain name of the target See also: whois-ip.nse Example Usage nmap --script whois-domain.nse This script starts by querying the whois.iana.org which is the root of the whois servers. Using some patterns the script can determine if the response represent...

Invision Power Board 1.x?2.x3.x - Admin Takeover

Invision Power Board 1.x?2.x3.x - Admin Takeover IPB Invision Power Board all versions 1.x? / 2.x / 3.x Admin account Takeover leading to code execution Written on : 2013/05/02 Released on : 2013/05/13 Author: John JEAN @johnjean on twitter Affected application: Invision Power Board = 3.4.4 Type ...

Nmap NSE 6.01: whois

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE 6.01: whois

Queries the WHOIS services of Regional Internet Registries RIR and attempts to retrieve information about the IP Address Assignment which contains the Target IP Address. The fields displayed contain information about the assignment and the organisation responsible for managing the address space...

CVE-2011-5193

Cross-site scripting XSS vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin 1.4.2.3 for WordPress, when the WHOIS widget is enabled, allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php, a different vulnerability than...

CVE-2011-5194

Cross-site scripting XSS vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin before 1.4.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the domain parameter, a different vulnerability than CVE-2011-5193...

Cross site scripting

Cross-site scripting XSS vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin before 1.4.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the domain parameter, a different vulnerability than CVE-2011-5193...

CVE-2011-5193

Cross-site scripting XSS vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin 1.4.2.3 for WordPress, when the WHOIS widget is enabled, allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php, a different vulnerability than...

CVE-2011-5194

Cross-site scripting XSS vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin before 1.4.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the domain parameter, a different vulnerability than CVE-2011-5193...

CVE-2011-5193

The CVE-2011-5193 entry concerns the WordPress plugin “Whois Search” (plugin path: vendors/samswhois/samswhois.inc.php). The vulnerability is an XSS in the index.php domain parameter when the WHOIS widget is enabled, exploitable in plugin versions around 1.4.2.3 (per CVE-2011-5193). Connected dat...

WordPress Whois Search Plugin <= 1.4.2.2 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "domain" parameter. Solution Update the plugin...

looter (поиск новых векторов атаки)

Небольшой скрипт,реализующий некоторые техники в сборе инфы и поиске новых векторов атаки: 1 non recurse tld request loot 2 soa email/domain loot 3 whois email/domain loot вводная Иногда бывают ситуации,когда требуется найти новые 'точки входа'. looter может помочь облегчить задачу - например,мож...

targets-asn NSE Script

Produces a list of IP prefixes for a given routing AS number ASN. This script uses a whois server database operated by the Shadowserver Foundation. We thank them for granting us permission to use this in Nmap. Output is in CIDR notation. Script Arguments targets-asn.whoisport The whois port to us...

WordPress Plugin WHOIS 1.4.2 3 - domain Cross-Site Scripting

WordPress Plugin WHOIS 1.4.2 3 - domain Cross-Site Scripting source: https://www.securityfocus.com/bid/51244/info WHOIS for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

WordPress WHOIS Plugin 1.4.2.3 - Cross Site Scripting

WordPress WHOIS plugin's "domain" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin WHOIS 1.4.2 3 - 'domain' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51244/info WHOIS for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Unfixed XSS vulnerability at weblicity.nl

Security researcher Atmon3r, has submitted on 31/12/2011 a cross-site-scripting XSS vulnerability affecting weblicity.nl, which at the time of submission ranked 1553172 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. It is currently...

WordPress Whois Search Cross Site Scripting

| Exploit Title: Wordpress whois search Cross-Site Scripting Vulnerability Google Dork: "inurl:wp-content/plugins/wp-whois/" Date: 31/12/2011 Author:||Atmon3r || Discovered By: Atmon3r Software Link: http://wordpress.org/extend/plugins/wordpress-whois-search/ Version: All Version Security Risk::...

Whois Cart Billing - Multiple Web Vulnerabilities

Document Title: =============== Whois Cart Billing - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=343 Release Date: ============= 2011-12-22 Vulnerability Laboratory ID VL-ID: ==================================== 343 Produ...