WPAD Listener

Added: 09/30/2013 Background The LLMNR Local Link Multicast Name Resolution protocol is used to answer wpad requests sent by Microsoft Windows. A rogue WPAD server delivers a wpad.dat file to poisoned hosts forcing them to proxy web requests through the SAINT server. In addition, browsers are...

Cisco SocialMiner Sensitive Information GET Request Vulnerability

A vulnerability in some of the gadgets of Cisco SocialMiner could allow an unauthenticated, remote attacker to collect sensitive information. The vulnerability is due to sensitive information being transmitted within a gadget's GET request. An attacker could exploit this vulnerability by capturin...

[SECURITY] Fedora 18 Update: kreversi-4.10.4-1.fc18

Kreversi is a simple one player strategy game played against the computer. The playing field is an 8 by 8 square board divided into 64 squares. The game pieces used are two sided stones, where each side has its own, distinctive color. If a piece is captured by an opposing player, that piece is...

Network Traffic Interception: Intercepter-NG

With great power comes great responsibility. New release for Intercepter-NG have been announced, this tool can be used for MITM attack on network during penetration test. the tool is very solid in sniffing passwords ,encrypted traffic , pictures transmitted over messengers and more. Intercepter i...

Windows Gather Screen Spy

This module will incrementally take desktop screenshots from the host. This allows for screen spying which can be useful to determine if there is an active user on a machine, or to record the screen for later data extraction. Note: As of March, 2014, the VIEWCMD option has been removed in favor o...

ActFax Server FTP - (Authenticated) Remote Buffer Overflow

!/usr/bin/python ----------------------------------------------------------------------------------- Exploit Title: ActFax Server FTP Remote BOF post auth Author: b33f - Ruben Boonen Software Link: http://www.actfax.com/download/actfaxsetupen.exe Tested on: Windows XP PRO SP3 version 2002 - VMwar...

CollabNet ScrumWorks Basic Server transmits credential information in plaintext

Overview Communication between the Collabnet ScrumWorks Basic Server and CollabNet ScrumWorks Desktop Client transmits credential information in plaintext. Description The communication between the CollabNet ScrumWorks Basic Server and CollabNet ScrumWorks Desktop Client is transmitting credentia...

Mozilla Foundation Security Advisory 2008-02

Mozilla Foundation Security Advisory 2008-02 Title: Multiple file input focus stealing vulnerabilities Impact: Moderate Announced: February 7, 2008 Reporter: hong, Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.12 SeaMonkey 1.1.8 Description Security researchers hong and...

CVE-2005-4872: Improper Restriction of Operations within the Bounds of a Memory Buffer

Perl-Compatible Regular Expression PCRE library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service crash via a regular expression with a large number of named subpatterns, which triggers a buffer...

Ethernet Device Drivers Frame Padding Info Leakage Expl (Etherleak)

Exploit for multiple platform in category remote exploits ====================================================================== Ethernet Device Drivers Frame Padding Info Leakage Exploit Etherleak ====================================================================== !/usr/bin/perl -w etherleak,...

CVE-2006-6953

CVE-2006-6953 affects the GlobeTrotter Mobility Manager. The vulnerability arises from the virtual keyboard: when a key is pressed, its color changes, enabling local attackers to capture arbitrary keystrokes (e.g., passwords) via shoulder surfing or periodic screenshots. Exploitation is local and...

[Full-disclosure] User privilege escalation exploit.

Vendor: CyberSource Version: Business Center, Essentials/Small Business, https://businesscenter.cybersource.com/ Severity: Vulnerability allows malicious employees or comprimised accounts to steal money. Vendor Status: Notified, expects to fix issue some time in 2006. Overview: Business Center is...

remote root security bug in ethereal 0.9.13 >= and <= 0.10.10

Suresec security advisory 2 9th May 2005 CVE ID: CAN-2005-1461 Remote root vulnerability in Ethereal. About ethereal: Ethereal is a widely used network packet capturing utility which has support for over 700 network protocols. Vulnerability summary: Ethereal has a dissector for the distcc network...

XSS-Cookie-Advisory.txt

------------------------------------------------------- XSS/Cookie problems at major webmail sites Advisory ------------------------------------------------------- XSS/Cookie problems at major webmail sites 13/11/02 - by "N|ghtHawk" Thijs Bosschert nighthawkathackers4hackers.org...

Linux Kernel 2.2 - TCPIP Spoof IP

Linux Kernel 2.2 - TCPIP Spoof IP / Exploit for the 2.2 linux-kernel TCP/IP weakness. C 1999 by S. Krahmer. THERE IS ABSOLUTELY NO WARRANTY. YOU USE IT AT YOUR OWN RSIK! THIS PROGRAM IS LICESED UNDER THE GPL and belongs to a security- advisory of team teso. You should get the full advisory with...

Linux Kernel 2.2 (TCP/IP Weakness) Exploit

Exploit for linux platform in category remote exploits ========================================== Linux Kernel 2.2 TCP/IP Weakness Exploit ========================================== / Exploit for the 2.2 linux-kernel TCP/IP weakness. C 1999 by S. Krahmer. THERE IS ABSOLUTELY NO WARRANTY. YOU USE ...