List Files with setuid-bit in / and /home, Check /tmp for sticky-bit

This plugin uses SSH to list files with setuid-bit in / and /home, check /tmp for sticky-bit. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fa Home - Authentication Bypass

Fa Home - Authentication Bypass ======================================================================================== | Title : Fa Home Auth Bypass Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Tested on: windows SP2 Français V.Pn...

Fa Home (Auth Bypass) Vulnerability

Exploit for php platform in category web applications =================================== Fa Home Auth Bypass Vulnerability =================================== ======================================================================================== | Title : Fa Home Auth Bypass Vulnerability |...

Satellite-X 4.0 - Authentication Bypass

======================================================================================== | Title : Satellite-X 4.0 Auth Bypass SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Dork : 2009 © Satellite-X | Tested on: windows...

Making friends

Hover your cursor atop Friends and click on Find Friends and you get this page, except you’ll likely have pictures. These are your friends’ friends. You can decide to ask these people to be your friends by clicking “Add as friend” or X to remove them from this list. You might also find it easier ...

Options for Local Security Checks

This script allows users to set some Options for Local Security Checks. These data are stored in the knowledge base and used by other tests. OpenVAS $Id: lscoptions.nasl 7822 2017-11-20 08:46:09Z cfischer $ Description: This script allows to set some Options for LSC. Authors: Michael Meyer...

Options for Local Security Checks

This script allows users to set some Options for Local Security Checks which are stored in the knowledge base and used by other tests. Description of the options: - Also use SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

E-Cart 3.0 RFI / Shell Upload / Disclosure

======================================================================================== | Title : e-cart 3.0 Multiple Vulnerabilities | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com |...

CVE-2009-1825

modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find action...

CVE-2009-1825

modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find action...

CVE-2009-1826

The CVE-2009-1826 entry affects myGesuad 0.9.14 (aka 0.9). The vulnerability is that modules/admuser.php does not require administrative authentication, enabling remote authenticated users to list user accounts via a Find action. This is the explicit root cause and impact stated in multiple sourc...

CVE-2009-1433

SQL injection vulnerability in File::find filesystem/File.php in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter...

Sql injection

SQL injection vulnerability in File::find filesystem/File.php in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter...

CVE-2009-1433

SQL injection vulnerability in File::find filesystem/File.php in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter...

Firefox 3 JavaScript engine crashes

The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service application crash and possibly trigger memory corruption via vectors involving 1 jsFindPropertyHelper, related to the definition...

Linux/x86 - connect-back "11.22.33.44",31337/tcp - 90 bytes

No description provided by source. /--------------------------------------------------------------------------- 90 byte Connect Back shellcode by Russell Sanford - [email protected] --------------------------------------------------------------------------- filename: x86-linux-connect-back.c info:...

kernel: hfsplus: fix Buffer overflow with a corrupted image

Buffer overflow in the hfsplusfindcat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service memory corruption or system crash via an hfsplus filesystem image with an invalid catalog namelength field, related to the hfspluscatbuildkeyu...

OSX/PPC - Stager Sock Find MSG_PEEK + Null-Free Shellcode

OSX/PPC - Stager Sock Find MSGPEEK + Null-Free Shellcode. Shellcode exploit for OSXPPC platform. Tags: Metasploit Framework MSF ;; ; ; Name: stagersockfindpeek ; Qualities: Null-Free ; Platforms: MacOS X / PPC ; Authors: H D Moore ; Version: $Revision: 1.1 $ ; License: ; ; This file is part of th...

CVE-2008-5786

Cross-site scripting XSS vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter...