Active Auction Pro SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Attackers Exploiting Windows Help Center Flaw

Researchers have found evidence that attackers are exploiting the vulnerability in the Windows Help and Support Center that was at the center of so much controversy last week. The flaw, which is in the protocol handler related to the Microsoft Windows Help and Support Center, was disclosed late...

Active Auction Pro SQL Vulnerability

Exploit for asp platform in category web applications ==================================== Active Auction Pro SQL Vulnerability ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

Real-Time ASP Calendar SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Sygate Personal Firewall 5.6 Build 2808 Active-X Exploit

seh = unescape"%13%16%47%06" 'ADD ESP,46C RETN rop = rop + String72, "D" 'J...

Plesk Server Administrator (PSA) LFI Vulnerability - Active Check

Plesk Server Administrator PSA is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Real-time ASP Calendar - SQL Injection

Real-time ASP Calendar - SQL Injection 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...

Real-time ASP Calendar - SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Virtual Real Estate Manager 3.5 SQL Injection

====================================================== Virtual Real Estate Manager V 3.5 SQLi Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

Active Directory Install at DHS Questioned

An audit of the Department of Homeland Security’s Microsoft Windows Active Directory at its headquarters revealed that its implementation failed to fully comply with the department’s security guidelines, and no mechanism was in place to ensure its level of security, DHS’s inspector general said i...

Anatomy of the New Adobe Flash Exploit

The exploit that is being used in the attacks against the latest zero-day vulnerability in Adobe Flash is a modified version of a harmless SWF file that is only one byte different from the original file. Researchers have seen the exploit being used in active attacks against the vulnerability in...

Virtual Real Estate Manager V 3.5 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================= Virtual Real Estate Manager V 3.5 SQL Injection Vulnerability =============================================================...

Google Chrome GURL Cross Origin Bypass (CVE-2010-1663)

Google Chrome is a web browser developed by Google Inc. It provides a rich web browsing experience similar to other web browsers such as Firefox, Opera, and Internet Explorer. Google Chrome web browser contains a cross origin bypass vulnerability. The vulnerability is due to insufficient validati...

Check if DNS client is active and working

This plugin uses SSH to check if a DNS client is active and working. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Releases Security Advisory for Flash Player, Reader, and Acrobat

Adobe has released a security advisory to notify users of a vulnerability in Adobe Flash Player, Reader, and Acrobat. Exploitation of this vulnerability may allow an attacker to execute arbitrary code and take control of the affected system. The advisory indicates that Adobe is aware of active...

Check write permissions of system-directorys

This plugin uses ssh to Check write permissions of system-directorys. OpenVAS Vulnerability Test $Id: GSHBSSHsysdirwriteperm.nasl 7067 2017-09-06 11:50:33Z teissa $ Check write permissions of system-directorys Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbone Networks GmbH,...

ManageEngine ADManager Plus Detection

ADManager Plus, a web-based management and reporting application for Active Directory, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46785; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"ManageEngine ADManage...

XFTP 3.0 Build 02.39 Long Filename Buffer Overflow

!/usr/bin/python import socket import sys """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...

ManageEngine ADAudit Plus Detection

ADAudit Plus, a web-based Active Directory change auditing software, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46788; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"ManageEngine ADAudit Plus Detection";...

XFTP 3.0 Build 0239 - 'Filename' Remote Buffer Overflow

!/usr/bin/python import socket import sys """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...