13 matches found
Malicious code in htp-https (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c2627fae79f21d1e7b7ad7f9e9ebca90c821733e520f78eb372c1ca2bd247bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10701 Malicious code in htp-https (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c2627fae79f21d1e7b7ad7f9e9ebca90c821733e520f78eb372c1ca2bd247bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ColdFusion 9-10 - Credential Disclosure Exploit
No description provided by source. !/usr/bin/env python -- coding: utf-8 -- intro= Cold ,''' Fusion || | | \ / | Cold ,''' /-- Fusion | | | | / |. Cold -,,' Fusion Name : ColdSub-Zero.pyFusion v2 Description : CF9-10 Remote Root Zeroday Crew : HTP cyan = \x1b1;36m red = \x1b1;31m clear = \x1b0m...
[Suricata 1.4.7] Open Source Next Generation Intrusion Detection and Prevention Engine
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of...
[Suricata v1.4.4] Next Generation Intrusion Detection and Prevention Engine
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of...
[Suricata 1.4.2] Next Generation Intrusion Detection and Prevention Engine
TheSuricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of Homela...
ColdFusion 9-10 - Credential Disclosure
ColdFusion 9-10 - Credential Disclosure !/usr/bin/env python -- coding: utf-8 -- intro=""" Cold ,''' Fusion || | | \ / | Cold ,''' /-- Fusion | | | | / |. Cold -,,' Fusion Name : ColdSub-Zero.pyFusion v2 Description : CF9-10 Remote Root Zeroday Crew : HTP """ cyan = "\x1b1;36m" red = "\x1b1;31m"...
ColdFusion 9-10 - Credential Disclosure
!/usr/bin/env python -- coding: utf-8 -- intro=""" Cold ,''' Fusion || | | \ / | Cold ,''' /-- Fusion | | | | / |. Cold -,,' Fusion Name : ColdSub-Zero.pyFusion v2 Description : CF9-10 Remote Root Zeroday Crew : HTP """ cyan = "\x1b1;36m" red = "\x1b1;31m" clear = "\x1b0m" print...
ColdFusion 9 / 10 Remote Root
!/usr/bin/env python -- coding: utf-8 -- intro=""" Cold ,''' Fusion || | | \ / | Cold ,''' /-- Fusion | | | | / |. Cold -,,' Fusion Name : ColdSub-Zero.pyFusion v2 Description : CF9-10 Remote Root Zeroday Crew : HTP """ cyan = "\x1b1;36m" red = "\x1b1;31m" clear = "\x1b0m" print...
Cybershade CMS 0.2b - Remote File Inclusion
Script Name : Cybershare CMS Download : http://sourceforge.net/project/downloading.php?groupid=213056&usemirror=surfnet&filename=cybershade0.2b-DEV.zip&40561526 Error : include $CMSROOT."core/core.php"; Vul. Code : htp://site/path/core/includes.php?CMSROOT=Shell Thanks : Kezzap66345 - Septemb0x...
CVE-2002-1636
CVE-2002-1636 affects Oracle 9i Application Server (9iAS) via the htp PL/SQL package. The vulnerability exists in htp.print where user-supplied cbuf can inject arbitrary script/HTML, enabling remote XSS. No remediation or fix version is provided in the supplied documents.
CVE-2002-1636
Cross-site scripting XSS vulnerability in the htp PL/SQL package for Oracle 9i Application Server 9iAS allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print...
Oracle 9iAS contains cross-site scripting vulnerability in "htp.print"
Overview Oracle 9i Application Servers are vulnerable to a cross-site scripting vulnerability. The server may inadvertently include malicious HTML tags or scriptJavaScript, VBScript, Java, etc. in a dynamically generated page based on unvalidated input from untrustworthy sources. This can be a...