Pystinger - Bypass Firewall For Traffic Forwarding Using Webshell

Pystinger implements SOCK4 proxy and port mapping through webshell. It can be directly used by metasploit-framework, viper, cobalt strike for session online. Pystinger is developed in python, and currently supports three proxy scripts: php, jspx and aspx. Usage Suppose the domain name of the serv...

AntSword cross-site scripting vulnerability (CNVD-2020-59741)

AntSword is an open source, cross-platform web management tool designed to meet the needs of penetration testers as well as security researchers with permissions and/or authorizations, and webmasters. A cross-site scripting vulnerability exists in AntSword 2.0.7. An attacker can exploit this...

AntSword Cross-Site Scripting Vulnerability (CNVD-2020-59739)

antSword is an open source cross-platform website management tool. AntSword 2.1.8.1 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to cause remote code execution when viewing added sites by injecting XSS valid content into the cookie view...

CVE-2020-18766

A cross-site scripting XSS vulnerability AntSword v2.0.7 can remotely execute system commands...

CVE-2020-18766

A cross-site scripting XSS vulnerability AntSword v2.0.7 can remotely execute system commands...

Cross site scripting

A cross-site scripting XSS vulnerability AntSword v2.0.7 can remotely execute system commands...

CVE-2020-18766

CVE-2020-18766 affects AntSword v2.0.7 and is described as a cross-site scripting (XSS) vulnerability that can remotely execute system commands. The connected records confirm the affected software version and the high-impact consequence (remote command execution) but do not provide a concrete roo...

CVE-2020-18766

A cross-site scripting XSS vulnerability AntSword v2.0.7 can remotely execute system commands...

CVE-2020-25470

AntSword 2.1.8.1 contains a cross-site scripting XSS vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution...

CVE-2020-25470

AntSword 2.1.8.1 contains a cross-site scripting XSS vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution...

Cross site scripting

AntSword 2.1.8.1 contains a cross-site scripting XSS vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution...

CVE-2020-25470

AntSword 2.1.8.1 is affected by a cross-site scripting (XSS) vulnerability in the View Site function. When an added site is viewed, an XSS payload can be injected in cookies view, which can lead to remote code execution. Affected component: AntSword 2.1.8.1; root cause: XSS in the View Site funct...

CVE-2020-25470

AntSword 2.1.8.1 contains a cross-site scripting XSS vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution...

antSword

This is a comprehensive analysis of the provided code and metadata from the AntSword repository. Classification: Exploit module/toolkit targeting web applications Primary CVE ID: Not specified Target product/service or framework: Web applications Vulnerability class/vector: Not specified Probable...

antSword Cross-Site Scripting Vulnerability

antSword is an open source cross-platform website management tool. A cross-site scripting vulnerability exists in the database configuration in versions of antSword prior to 2.1.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...

CVE-2019-13970

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...

CVE-2019-13970

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...

Code injection

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...

CVE-2019-13970

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...

CVE-2019-13970

CVE-2019-13970 affects antSword before 2.1.0. A self-XSS vulnerability in the database configuration leads to code execution through the modules: modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js. Impact is described as co...