HTB22927: CSRF (Cross-Site Request Forgery) in Webjaxe

Vulnerability ID: HTB22927 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinwebjaxe.html Product: Webjaxe Vendor: Webjaxe http://media4.obspm.fr/outils/webjaxe/en/ Vulnerable Version: 1.02 Vendor Notification: 29 March 2011 Vulnerability Type: CSRF Cross-Site Request Forger...

FCKEditor Core 2.x 2.4.3 - FileManager upload.php Arbitrary File Upload

FCKEditor Core 2.x 2.4.3 - FileManager upload.php Arbitrary File Upload Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload Author: grabz Software Link: http://sourceforge.net/projects/fckeditor/ Version: FCKeditor 2.x = 2.4.3 Tested on: 2.0, 2.2, 2.3.2, 2.4.0, 2.4.3 for version 2.0 - 2.2: i...

http-form-brute NSE Script

Performs brute force password auditing against http form-based authentication. This script uses the unpwdb and brute libraries to perform password guessing. Any successful guesses are stored in the nmap registry, using the creds library, for other scripts to use. The script automatically attempts...

PT-2009-3226 · Apache +2 · Apache Tomcat +2

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.1.0 through 4.1.39 Apache Tomcat versions 5.5.0 through 5.5.27 Apache Tomcat versions 6.0.0 through 6.0.18 Description: The issue allows remote attackers to enumerate valid usernames via requests to "/j security check...