Meet John Rostern: Managing Director of the New York Office

We are pleased to announce that John Rostern has joined Coalfire Systems as managing director of the New York office...

John the Ripper 1.7.7 new version Released !

John the Ripper 1.7.7 new version Released ! "John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt3 password hash types commonly found on Unix...

eyeOS 2.3 Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................eyeOS 2.3 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.eyeos.org/ Discover...

OpenEMR 4.0.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................OpenEMR 4.0.0 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.oemr.org/...

Graugon Forum 1.3 - SQL Injection

Graugon Forum 1.3 - SQL Injection ------------------------------------------------------------------------ --Description-- A SQL injection vulnerability in Graugon Forum 1.3 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell. --PoC--...

Easy File Sharing Web Server 5.8 Multiple Vulnerabilities

Exploit for windows platform in category remote exploits ------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...

Andy's PHP KnowledgeBase 0.95.4 - SQL Injection

------------------------------------------------------------------------ Software................Andy's PHP Knowledgebase Project 0.95.4 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.aphpkb.org/ Discovery Date..........3/27/2011 Test...

Easy File Sharing Web Server 5.8 - Multiple Vulnerabilities

Easy File Sharing Web Server 5.8 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...

oscss2 2.1.0 rc12 - Multiple Vulnerabilities

------------------------------------------------------------------------ Software................osCSS2 2.1.0 RC12 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.oscss.org/ Disclosure Date.........4/6/2011 Tested...

webEdition CMS 6.1.0.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................Web Edition 6.1.0.2 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

SAP Management Console getStartProfile

This module simply attempts to access the SAP startup profile through the SAP Management Console SOAP Interface. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP Management Console...

SAP Management Console Version Detection

This module simply attempts to identify the version of SAP through the SAP Management Console SOAP Interface. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP Management Console Version...

Anonymous Surpasses Wikileaks !

The exploits of Anonymous to hack the systems of firms providing spying services to governments and corporations suggest that the WikiLeaks mini-era has been surpassed. Much of WikiLeaks promise to protect sources is useless if the sources are not whistleblowers needing a forum for publication...

Solar FTP Server 2.1.1 - 'PASV' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/45748/info SolarFTP is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. SolarFTP 2....

httpdASM 0.92 Directory Traversal

Exploit for windows platform in category remote exploits ------------------------------------------------------------------------ Software................httpdASM 0.92 Vulnerability...........Directory Traversal Download................http://www.japheth.de/httpdASM.html Release...

httpdasm 0.92 - Directory Traversal

------------------------------------------------------------------------ Software................httpdASM 0.92 Vulnerability...........Directory Traversal Download................http://www.japheth.de/httpdASM.html Release Date............12/27/2010 Tested On...............Windows XP...

QuickPHP Web Server 1.9.1 Directory Traversal

Exploit for windows platform in category remote exploits ------------------------------------------------------------------------ Software................QuickPHP Web Server 1.9.1 Vulnerability...........Directory Traversal...

Mongoose 2.11 Denial Of Service

------------------------------------------------------------------------ Software................Mongoose 2.11 Vulnerability...........Denial Of Service Download................http://code.google.com/p/mongoose/ Release Date............12/27/2010 Tested On...............Windows XP...

http-domino-enum-passwords NSE Script

Attempts to enumerate the hashed Domino Internet Passwords that are by default accessible by all authenticated users. This script can also download any Domino ID Files attached to the Person document. Passwords are presented in a form suitable for running in John the Ripper. The passwords may be...

john cms 322 RFI Vulnerability

Exploit for php platform in category web applications ============================== john cms 322 RFI Vulnerability ============================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1...