Mosca - Static Analysis Tool To Find Bugs

Just another Simple static analysis tool to find bugs like a grep unix command, at mosca have a modules, that was call egg, each egg is a simple config to find bug at especific language like PHP,Ruby,ASP etc... Example of egg config at directory "egg", If Mosca read a line with vunerability of eg...

ASP Dynamika 2.5 Cross Site Scripting

Exploit Title : ASP Dynamika 2.5 Cross Site Scripting Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.dynamika.co.il/ Google Dork : "Powered By : Dynamika" Date : 2015/12/08 Version : 2.5 Vulnerable Paramter siteid= Bypass '"--alert0xa Demo:...

ASP Dynamika 2.5 File Upload / SQL Injection

Asp Dynamika 2.5 Upload Vulnerability ===================================== Author : indoushka Vondor : http://www.dynamika.co.il/dynamikadesign Dork : Powered By : Dynamika Tested on : windows 8.1 Français V.Pro ============================================================ FCKeditor Upload :...

These Top 10 Programming Languages Have Most Vulnerable Apps on the Internet

A new research showed that Scripting languages, in general, give birth to more security vulnerabilities in web applications, which raised concerns over potential security bugs in millions of websites. The app security firm Veracode has released its State of Software Security: Focus on Application...

visitchester.com vulnerability

Vulnerable URL: http://www.visitchester.com/engine/referrer.asp?web=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 20.12.2015 Latest check for patch:| 20.12.2015 11:33 GMT Vulnerability status:| Publicly disclosed Alexa Rank| 753682 Google Pagerank| 5 VIP website...

visitmaidstone.com vulnerability

Vulnerable URL: http://www.visitmaidstone.com/engine/referrer.asp?web=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 2505725 Google Pagerank| 3 VIP website status:| No Check...

visit1066country.com vulnerability

Vulnerable URL: http://www.visit1066country.com/engine/referrer.asp?web=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 1053687 Google Pagerank| 4 VIP website status:| No Check...

mapsupply.com XSS vulnerability

Vulnerable URL: https://www.mapsupply.com/CloseUp2.asp?Image=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18547045 Google Pagerank| ...

The vulnerability of the Microsoft .NET Framework software platform allows a perpetrator to inject arbitrary web or HTML code.

The vulnerability of the ASP.NET software platform, Microsoft .NET Framework, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted variable value...

某通用型电子采购平台存在任意文件上传漏洞，可直接上传asp文件批量GETSHELL

简要描述： --求个邀请码 详细说明： 1.看看前人提交的漏洞：http://.../bugs/wooyun-2014-070117 ，测试拿下shell之后偶然发现另外一个上传点，同样没做任何过滤，可直接穿asp后门 谷歌：inurl:/custom/GroupNewsList.aspx 2：上传点 http://xxx/library/editornew/Editor/temp.asp 漏洞证明： 随便点开一个网站进去 成功上传 http://...:90/library/editornew/Editor/NewImage/201511722102813827.asp 3：更多案例...

raster.se XSS vulnerability

Vulnerable URL: http://www.raster.se/Index2.asp?from=Handla="'; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 3 VIP website status:| No...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Kaseya Virtual System Administrator (VSA) - 'uploader.aspx' Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Kaseya VSA uploader.aspx Arbitrary File Upload', 'Description' = %q This module exploits an arbitrary file upload vulnerability foun...

Kaseya VSA uploader.aspx Arbitrary File Upload Exploit

This Metasploit module exploits an arbitrary file upload vulnerability found in Kaseya VSA versions between 7 and 9.1. A malicious unauthenticated user can upload an ASP file to an arbitrary directory leading to arbitrary code execution with IUSR privileges. This Metasploit module has been tested...

Kaseya VSA uploader.aspx Arbitrary File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Kaseya VSA uploader.aspx Arbitrary File Upload', 'Description' = %q This module exploits an arbitrary file upload vulnerability foun...

Kaseya VSA uploader.aspx Arbitrary File Upload

This module exploits an arbitrary file upload vulnerability found in Kaseya VSA versions between 7 and 9.1. A malicious unauthenticated user can upload an ASP file to an arbitrary directory leading to arbitrary code execution with IUSR privileges. This module has been tested with Kaseya v7.0.0.17...

kindeditor<=4.1.5文件上传漏洞

漏洞描述漏洞存在于kindeditor编辑器里，你能上传.txt和.html文件，支持php/asp/jsp/asp.net漏洞存在于小于等于kindeditor4.1.5编辑器中关键字： allinurl:/examples/uploadbutton.html allinurl:/php/uploadjson.php / .asp /...

asp.gov.al XSS vulnerability

Vulnerable URL: http://www.asp.gov.al/index.php/faqja-nuk-u-gjet/17-shqip/lajmet-e-fundit/7461-kamp-veror-me-300-femije-ne-perfundim-te-programit-sensibilizues-kunder-droges-organizuar-nga-policia-e-shtetit-drejtoria-e-arsimit-parauniversitar-programi-icitap-sacp-si-dhe-save-the-children? Details...

police.ufl.edu XSS vulnerability

Open Bug Bounty ID: OBB-86183 Description| Value ---|--- Affected Website:| police.ufl.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

MS15-101: Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (3089662)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities in the Microsoft .NET Framework : - An elevation of privilege vulnerability exists due to improper validation of the number of objects in memory before they are copied into an array. A...