0d1n - Tool For Automating Customized Attacks Against Web Applications

Web security tool to make fuzzing at HTTP inputs, made in C with libCurl. You can do: brute force passwords in auth forms directory disclosure use PATH list to brute, and find HTTP status code test list on input to find SQL Injection and XSS vulnerabilities To run: require libcurl-dev or...

pcs security update

CentOS Errata and Security Advisory CESA-2015:2290 An updated pcs package that fixes one security issue, several bugs, and add various enhancements is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common...

Heartbleed Vulnerability Scanner - Network Scanner for OpenSSL Memory Leak (CVE-2014-0160)

Heartbleed Vulnerability Scanner is a multiprotocol HTTP, IMAP, SMTP, POP CVE-2014-0160 scanning and automatic exploitation tool written with python. For scanning wide ranges automatically, you can provide a network range in CIDR notation and an output file to dump the memory of vulnerable system...

Milw0rm Clone Script 1.0 Cross Site Scripting

Exploit Title: Milw0rm Clone Script 1.0 - XSS Vulnerability Date: 03.09.2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage: http://milw0rm.sourceforge.net/ Software Link: http://sourceforge.net/projects/milw0rm/files/milw0rm.rar/download Version: v1.0 Tested on: MSWin64 Vulnerable File :...

Alibaba Clone B2B Script Sql Injection Vulnerability

Exploit Title: Alibaba Clone B2B Script Sql Injection All Versions Date: 2015-08-31 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://www.superbscripts.com/ Version: All Versions Tested on: CentOS and Windows Exploit Title: Alibaba Clone B2B Script Sql...

kernel: x86: espfix(64) bypass via set_thread_area and CLONE_SETTLS

It was found that the espfix functionality could be bypassed by installing a 16-bit RW data segment into GDT instead of LDT which espfix checks, and using that segment on the stack. A local, unprivileged user could potentially use this flaw to leak kernel stack addresses...

Milw0rm Clone Script 'admin/login.php' SQL Injection Vulnerability

Milw0rm Clone Script is a Milw0rm clone script. Milw0rm Clone Script 'admin/login.php' fails to properly filter user-supplied input and is vulnerable to multiple SQL injection vulnerabilities. This allows attackers to compromise the application, access or modify data, or exploit potential...

Milw0rm Clone Script SQL Injection Vulnerability

Milw0rm is a hacking and defense interest group that provides security services such as vulnerability mining, security information, hacking and defense, security tools and other security services for IT technicians.Milw0rm Clone Script is a script for sharing and managing the Milw0rm website's...

CVE-2015-4658

Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 usr or 2 pwd parameter...

CVE-2015-4658

Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 usr or 2 pwd parameter...

CVE-2015-4658

CVE-2015-4658 is described across multiple sources as a SQL injection vulnerability in the Milw0rm Clone Script 1.0. The affected component is the admin/login.php script, with input fields (1) usr and (2) pwd used to construct SQL queries, enabling remote attackers to execute arbitrary SQL comman...

Milw0rm Clone Script 1.0 - '/admin/login.php' Authentication Bypass

| Exploit Title: Milw0rm Clone Script v1.0 Auth Bypass SQL Injection Vulnerability | | Date: 06.13.2015 | | Exploit Daddy: Walid Naceri | | Vendor Homepage: http://milw0rm.sourceforge.net/ | | Software Link: http://sourceforge.net/projects/milw0rm/files/milw0rm.rar/download | | Version: v1.0 | |...

CVE-2015-4137

SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter...

Sql injection

SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter...

CVE-2015-4137

SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter...

CVE-2015-4137

CVE-2015-4137 describes an SQL injection vulnerability in Milw0rm Clone Script 1.0, specifically in the related.php module. The vulnerability allows remote attackers to execute arbitrary SQL commands through the program parameter, leading to partial confidentiality and integrity impacts and a hig...

Milw0rm Clone Script 'related.php' SQL Injection Vulnerability

The Milw0rm Clone Script is a script for sharing and managing vulnerability categorization in the Milw0rm website. A SQL injection vulnerability exists in Milw0rm Clone Script, which allows remote attackers to exploit the vulnerability to submit specially crafted SQL queries to manipulate or obta...

FTPMap - FTP scanner in C

Ftpmap scans remote FTP servers to indentify what software and what versions they are running. It uses program-specific fingerprints to discover the name of the software even when banners have been changed or removed, or when some features have been disabled. also FTP-Map can detect Vulnerables b...

Milw0rm Clone Script 1.0 SQL Injection

| Exploit Title: Milw0rm Clone Script v1.0 - time based SQLi | | Date: 05.19.2015 | | Exploit Daddy: pancaker | | Vendor Homepage: http://milw0rm.sourceforge.net/ | | Software Link: http://sourceforge.net/projects/milw0rm/files/milw0rm.rar/download | | Version: v1.0 | | Tested On: Ubuntu 10.04 | ...

DEBIAN-CVE-2015-3451

The clone function in XML::LibXML before 2.0119 does not properly set the expandentities option, which allows remote attackers to conduct XML external entity XXE attacks via crafted XML data to the 1 new or 2 loadxml function...