BaRMIe - Java RMI Enumeration And Attack Tool

BaRMIe is a tool for enumerating and attacking Java RMI Remote Method Invocation services. RMI services often expose dangerous functionality without adequate security controls, however RMI services tend to pass under the radar during security assessments due to the lack of effective testing tools...

IBM Sametime Session Enumeration Vulnerability

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video. A security vulnerability exists in IBM Sametime versions 8.5.2 and 9.0. An attacker could...

CVE-2016-2966

IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id. IBM X-Force ID: 113847...

V1D0m: Enumerate Subdomains via Virustotal!

PenTestIT RSS Feed VirusTotal for long has provided a free online file and URL scanning service. Infact, I think it is THE site that started this kind of service more than 10 years ago. Wikipedia mentions that it was started in the year 2004! It also offers a "search" service which helps us to fi...

I_ Librarian 4.6/4.7 - Command Injection / Server Side Request Forgery / Directory Enumeration / Cross-Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: I, Librarian PDF manager vulnerable version: =4.6 & 4.7 fixed version: 4.8 CVE number: - impact: Critical homepage:...

Dashlane: Extract Billing admin email address using random team id

Any user can extract and enumerate email address of dashlane members. Steps to reproduce 1 Login to console.dashlane.com Register using https://www.dashlane.com/business/try 2 Click on Manage Users while intercepting request in Burp 3 Look for a request to...

Server side request forgery (ssrf)

Multiple server-side request forgery SSRF vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enumerate open ports via the dbhost parameter to libs/org/adodblite/tests/testadodblite.php, libs/org/adodblite/tests/testdatadictionary.php, or...

PT-2017-7232

Name of the Vulnerable Software and Affected Versions Yeager CMS version 1.2.1 Description The issue allows remote attackers to trigger outbound requests and enumerate open ports. This is achieved via the dbhost parameter to specific API endpoints, including 'libs/org/adodb lite/tests/test adodb...

PT-2017-15404

Name of the Vulnerable Software and Affected Versions macOS Server versions prior to 5.3 Description An issue was discovered in macOS Server, involving the Wiki Server component. It allows remote attackers to enumerate user accounts via unspecified vectors. Recommendations For versions prior to...

PYSEC-2017-42

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2016-4950

CVE-2016-4950 affects Cloudera Manager 5.5 and earlier. A remote attacker could enumerate user sessions by calling /api/v11/users/sessions, exposing active sessions information. Public descriptions confirm the issue is an access-control flaw in the sessions API. The IBM security bulletin maps CVS...

CVE-2016-7982

Directory traversal vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the varurl parameter in a validerxml action...

PT-2017-9444

Name of the Vulnerable Software and Affected Versions SPIP versions 3.1.2 and earlier Description A directory traversal issue exists, allowing remote attackers to enumerate system files via the var url parameter in a "valider xml" action. Recommendations For SPIP versions 3.1.2 and earlier, updat...

Mozilla: Crash in EnumerateSubDocuments (MFSA 2016-94, MFSA 2016-95)

A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...

Mozilla: Crash in EnumerateSubDocuments (MFSA 2016-94, MFSA 2016-95)

A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...

MYSQL Directory Write Test

Enumerate writeable directories using the MySQL SELECT INTO DUMPFILE feature, for more information see the URL in the references. Note: For every writable directory found, a file with the specified FILENAME containing the text test will be written to the directory. This module requires Metasploit...

OpenSSH 7.x < 7.3 Multiple Vulnerabilities

Binary data 9507.prm...

Code injection

The SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for failed login attempts depending on whether the username exists and is locked when the detailederroronconnect option is not supported or is configured as "False," which allows remote attackers to enumerat...

Windows Mapped Network Drives

Nessus was able to generate a report of mapped network drives on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid92422; scriptversion"1.6"; scriptcvsdate"Date: 2018/11/15 20:50:27"; scriptnameenglish:"Windows Mapped Network Drives";...

Recent File History

Nessus was able to gather evidence of files opened by file type from the remote host. C Tenable Network Security, Inc. include"compat.inc"; if !definedfunc"nasllevel" || nasllevel 5200 exit0, "Not Nessus 5.2+"; if description scriptid92428; scriptversion"1.7"; scriptcvsdate"Date: 2018/11/15...