RapidScan - The Multi-Tool Web Vulnerability Scanner

Evolution: It is quite a fuss for a pentester to perform binge-tool-scanning running security scanning tools one after the other sans automation. Unless you are a pro at automating stuff, it is a herculean task to perform binge-scan for each and every engagement. The ultimate goal of this program...

CVE-2018-13381

A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions and FortiProxy 2.0.0, 1.2.8 and earlier versions under SSL VPN web portal allows a non-authenticated attacker to perform a Denial-of-service attack via special craft message...

CVE-2019-10327

CVE-2019-10327 affects Jenkins Pipeline Maven Integration Plugin versions 1.7.0 and earlier. The vulnerability is an XML External Entity (XXE) flaw in which a malicious XML file, processed via a Maven build that uses a temporary directory on the agent, can cause extraction of secrets from the Jen...

X (Formerly Twitter): cookie injection allow dos attack to periscope.tv

Description: i find in periscope.tv a parameter "createuser" allow to inject "loginissignup" cookie, when tested with crlf payload get response "HTTP/1.1 504 GATEWAYTIMEOUT" Link Vulnerable: https://www.periscope.tv/i/twitter/login?createuser=payload&csrf=yourcsrftoken Steps To Reproduce: 1. go t...

Denial Of Service (DoS)

Binutils is vulnerable to denial of service DoS attacks. The vulnerability exists in the ignoresectionsym function in elf.c in the Binary File Descriptor BFD library because it does not validate the outputsection pointer in the case of a symtab entry with a "SECTION" type that has a "0" value. An...

Denial Of Service

389-ds-base is vulnerable to denial of serviceDoS attacks. This is because the lock controlling the error log is not correctly used when re-opening the log file in logerroremergency. An attacker could send a flood of modifications to a very large DN which may lead slapd to crash...

Denial Of Service (DoS)

PHP is vulnerable to denial of serviceDoS attacks. This is because the ext/intl/msgformat/msgformatparse.c does not restrict the locale length which allows remote attacker to cause stack-based buffer overflow and application crash or possibly have unspecified other impact within International...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown function of the component Security. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit causing a parital denial of service...

Denial Of Service (DoS)

mysql is vulnerable to denial of service DoS attacks. The vulnerability is in mysql server component of Oracle MySQL . A high privileged attacker with network access via multiple protocols could compromise MySQL server resulting in unauthorized ability to cause a hang or frequently repeatable cra...

Denial Of Service (DoS)

Ruby is vulnerable to denial of serviceDoS attacks. An attacker could provide a specially crafted string to the OpenSSL::ASN1 decode function to cause the target interpreter to crash...

Privilege Escalation

MySQL is vulnerable to denial of service Dos attacks. A low privileged attacker with network access via multiple protocols could compromise MySQL Server resulting in unauthorized update, insert or delete access to some of MySQL Server accessible data...

CVE-2018-19218

In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parsecssvariablevaluetoken that will lead to a DoS attack...

CVE-2018-19219

In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack...

Improper Input Validation in Apache Sanselan

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

Infinite Loop in Apache Sanselan

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

EulerOS Virtualization 3.0.1.0 : libsndfile (EulerOS-SA-2019-1441)

According to the versions of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out of bounds read in the function d2ulawarray in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or informatio...

Siemens SIMATIC S7-1500 PLCs < 1.5 Improper Resource Release DOS

Binary data 720196.prm...

Siemens SIMATIC S7-1500 PLCs < 1.5 ISO-TSAP Packets DOS

Binary data 720200.prm...

Denial Of Service (DoS)

Apache commons-imaging previously known as Apache Sanselan is susceptible to denial of service DoS attack. The vulnerability can be triggered by sending some malicious input causing an infinite loop when the input is processed...

CVE-2018-17201

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...