17565 matches found
Advanced Text Widget < 2.0.2 - Cross-Site Scripting
A cross-site scripting XSS vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. id: CVE-2011-4618 info: name: Advanced Text Widget 2.0.2 - Cross-Site Scripting author:...
Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting
Tiki Wiki CMS Groupware 7.0 is vulnerable to cross-site scripting via the GET "ajax" parameter to snarfajax.php. id: CVE-2011-4336 info: name: Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting author: pikpikcu severity: medium description: Tiki Wiki CMS Groupware 7.0 is vulnerable to cross-site...
Featurific For WordPress 1.6.2 - Cross-Site Scripting
A cross-site scripting vulnerability in cachedimage.php in the Featurific For WordPress plugin 1.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the snum parameter. id: CVE-2011-5265 info: name: Featurific For WordPress 1.6.2 - Cross-Site Scripting author:...
WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting
A cross-site scripting vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter. id: CVE-2011-5106 info: name: WordPress Plugin Flexible Custom Post Type 0.1.7 - Cross-Site...
Skysa App Bar 1.04 - Cross-Site Scripting
A cross-site scripting vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly before 1.04, for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter. id: CVE-2011-5179 info: name: Skysa App Bar 1.04 - Cross-Site Scriptin...
ParrotNG
ParrotNG ParrotNG is a tool capable of identifying Adobe Flex applications SWF vulnerable to CVE-2011-2461. For more details, please refer to the slides of our Troopers 2015 talk. Download the latest release from HERE. Features Written in Java, based on swfdump One JAR, two flavors: command line...
TWSL2011-007_iOS_code_workaround
= testcert Reference implementation for TWSL2011-007 vulnerability workaround aka CVE-2011-0228. Author: Eric Monti Date: July 28, 2011 = Compiling Compile with your Apple iOS SDK CFLAGS along with: gcc -o testcert testcert.m -framework Foundation -framework Security The compile arguments above...
CVE-2011-3192-apache-exploit
CVE-2011-3192 This exploit triggers a denial of service condition in Apache versions 1.3.x, 2.0.64 and below and 2.2.19 and below. Developed in 2011 by Antonius ev1lut10n / w1sdom...
metasploitable2-vsftpd-writeup
Metasploitable2 — vsftpd 2.3.4 Backdoor Exploitation A hands-on lab demonstrating discovery and exploitation of a known backdoor vulnerability in vsftpd 2.3.4, using an isolated Kali Linux ↔ Metasploitable2 environment. Objective Practice the core penetration testing workflow — reconnaissance,...
CVE-2011-2523-vsFTPd-2.3.4-Writeup
" CVE-2011-2523-vsFTPd-2.3.4-Writeup"...
vsftpd-cve-2011-2523-detection-signature
Detection Engineering & Vulnerability Research - CVE-2011-2523 vsftpd 2.3.4 A CVE to Detection Signature Engineering Project: researching a disclosed vulnerability, building a fingerprint that identifies it externally, and validating detection quality against real lab targets. !Vulnerability...
apache__myfaces_CVE-2011-4367_2-0-11
Apache's implementation of the JavaServer Faces JSF and Jakarta Faces specification Branches main Jakarta Faces 5.0 implementation 4.1.x Jakarta Faces 4.1 implementation 4.0.x Jakarta Faces 4.0 implementation Based on the refactored 2.3-next codebase 2.3-next Almost JavaServer Faces 2.3...
GO-CVE-2011-4862
CVE-2011-4862 GO Exploit for CVE-2011-4862 Cross Compile with: GOOS=linux GOARCH=arm go build main.go...
CVE-2011-3368
This repository does not have a README...
vsftpd2.3.4PyExploit
vsftpd2.3.4PyExploit An exploit to get root in vsftpd 2.3.4 CVE-2011-2523 written in python Usage: ./exploit.py $VictimIPaddress Attention! The exploit open a shell that it is not reverse. I recommend to open a reverse shell after the exploit. I didnt do it here because i didnt want to assume wha...
metasploit-lab-report
Metasploit Penetration Testing Lab Report 📋 Overview This repository contains a comprehensive penetration testing lab report demonstrating exploitation of known vulnerabilities in Metasploitable 2 using the Metasploit Framework. This is an educational resource documenting proper penetration testi...
cve-2011-1575-poc
This repository does not have a README...
vsFTPd-2.3.4-Exploit
vsFTPd 2.3.4 Exploit Python Proof of Concept for the vsFTPd 2.3.4 backdoor — CVE-2011-2523 Description vsFTPd Very Secure FTP Daemon is an FTP server commonly used on Unix-like systems. The vsFTPd 2.3.4 release distributed in 2011 was compromised with a malicious backdoor. This was not a normal...