ZTE and TP-Link RomPager - DoS Exploit

No description provided by source. !/usr/bin/env python -- coding: utf-8 -- Exploit Title: ZTE and TP-Link RomPager DoS Exploit Date: 10-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 TP-Link TD-W8901G TP-Link TD-W8101G TP-Link TD-8840G Firmware:...

Ability Mail Server 2013 - Password Reset CSRF from Stored XSS (Web UI)

No description provided by source. On one machine Windows Server 2003, install a new instance of AMS with these configurations 1. Primary Domain: hack.local 2. Enable the WebMail Service 3. Domain Name: hack.local 4. Add a User and set Password. In this case I created a user named, victim, with a...

PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom...

Uptime Agent 5.0.1 - Stack Overflow Vulnerability

No description provided by source. Exploit Title: Up.Time Agent 5.0.1 Stack Overflow Date: 28/11/2013 Exploit Author: Denis Andzakovic Vendor Homepage: http://www.uptimesoftware.com/ Version: 5.0.1 Tested on: Debian 7 Kernel 3.2.0, Kali Kernel 3.7 , , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ ...

nginx 1.3.9-1.4.0 - DoS PoC

No description provided by source. Exploit Title: nginx v1.3.9-1.4.0 DOS POC CVE-2013-2028 Google Dork: CVE-2013-2028 Date: 16.05.2013 Exploit Author: Mert SARICA - mert . sarica @ gmail . com - http://www.mertsarica.com Vendor Homepage: http://nginx.org/ Software Link:...

McAfee ePolicy Orchestrator 4.6.0-4.6.5 (ePowner) - Multiple Vulnerabilities

No description provided by source. Exploit Title: McAfee ePolicy Orchestrator 4.6.0-4.6.5 ePowner - Multiple vulnerabilities Date: 20 November 2012 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage: http://www.mcafee.com/uk/products/epolicy-orchestrator.aspx Version...

ZTE TP-Link RomPager - Denial of Service

ZTE TP-Link RomPager - Denial of Service !/usr/bin/env python -- coding: utf-8 -- Exploit Title: ZTE and TP-Link RomPager DoS Exploit Date: 10-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 TP-Link TD-W8901G TP-Link TD-W8101G TP-Link TD-8840G Firmware:...

ZTE / TP-Link RomPager - Denial of Service

!/usr/bin/env python -- coding: utf-8 -- Exploit Title: ZTE and TP-Link RomPager DoS Exploit Date: 10-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 TP-Link TD-W8901G TP-Link TD-W8101G TP-Link TD-8840G Firmware: FwVer:3.11.2.175TC3086 HwVer:T14.F75.0 Tested on: Kali...

UltraVintage Cross Site Scripting / SQL Injection

Title: UltraVintage Cross Site Scripting / SQL Injection + Date: 2014/06/04 + Author: Hekt0r + Vendor Homepage: http://www.ultravintage.com + Tested on: Windows 7 & Kali Linux + Vulnerable File: /main.php + Dork : intext:"Created by UltraVintage" inurl:/main.php?id= POC: + Exploit Sql Injection:...

NeginGroup Cross Site Scripting / SQL Injection

Title: Sql Injection / Xss on NeginGroup CMS + Date: 2014/5/29 + Author: Hekt0r + Vendor Homepage: www.NeginGroup.com + Tested on: Windows 7 & Kali Linux + Vulnerable File: /viewpageone.php + Dork : intext:www.NeginGroup.com inurl:/viewpageone.php?v= Exploitation: + Exploit Sql Injection:...

OWASP OWTF – Offensive (Web) Testing Framework

The purpose of this tool is to automate the manual, uncreative part of pen testing: For example, spending time trying to remember how to call "tool X", parsing results of "tool X" manually to feed "tool Y", etc. By reducing this burden I hope pen testers will have more time to: See the big pictur...

Kali Linux 1.0.7 Released

Kernel 3.14, Tool Updates, Package Improvements Kali linux 1.0.7 has just been released, complete with a whole bunch of tool updates, a new kernel, and some cool new features. Check out our changelog for a full list of these items. As usual, you don’t need to re-download or re-install Kali to...

Latest Kali Linux 1.0.7 Offers Persistent Encrypted Partition on USB Stick

There is a good news for all Security researchers, Penetration testers and Hackers. The developers of one of the most advance open source operating system for penetration testing, 'KALI Linux' have announced yesterday the release of its latest version of Kali Linux 1.0.7 with some interesting...

Mayan-EDms Web-Based Document Management OS System - Multiple Persistent Cross-Site Scripting Vulnerabilities

Mayan-EDms Web-Based Document Management OS System - Multiple Persistent Cross-Site Scripting Vulnerabilities Exploit Title: Multiple Stored XSS Software: Maya EDMS Software Link: http://www.mayan-edms.com/downloads/Mayan%20EDMS%20v0.13.ova Version: 0.13 - latest Author: Dolev Farhi, email:...

Linux/x86 - setreuid() + execve(/usr/bin/python) Shellcode (54 bytes)

Linux/x86 - setreuid + execve/usr/bin/python Shellcode 54 bytes. Shellcode exploit for Linuxx86 platform Title: Shellcode Linux x86 54Bytes Run /usr/bin/python | setreuid,execve Date: 8/5/2014 Author: Ali Razmjoo Tested on: kali-linux-1.0.4-i386 3.7-trunk-686-pae 1 SMP Debian 3.7.2-0+kali8 i686...

KALI Linux Mailing List Website Hacked Using Heartbleed Vulnerability

When it comes to Digital Forensics, Penetration and Security testing, we mostly relies on Kali Linux distribution also known as Backtrack, which is designed for security professionals and packed with more than 300 security testing tools. But Today, Mailing List sub-domain of Kali Linux get hacked...

McAfee ePolicy Orchestrator 4.6.0-4.6.5 (ePowner) - Multiple Vulnerabilities

McAfee ePolicy Owner ePowner version 0.1 is an exploit that can add an administrative user to McAfee ePolicy Orchestrator as well as execute arbitrary commands on versions 4.6.0 through 4.6.5. Exploit Title: McAfee ePolicy Orchestrator 4.6.0-4.6.5 ePowner - Multiple vulnerabilities Date: 20...

Heartbleed OpenSSL Lib Vulnerability - Demonstration MSF

Document Title: =============== Heartbleed OpenSSL Lib Vulnerability - Demonstration MSF References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1262 Video: https://www.youtube.com/watch?v=ysc75yNrfyk Patch: http://www.vulnerability-lab.com/getcontent.php?id=1254 Check:...

Heartbleed OpenSSL Lib Vulnerability - Demonstration MSF

Document Title: =============== Heartbleed OpenSSL Lib Vulnerability - Demonstration MSF References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1262 Video: https://www.youtube.com/watch?v=ysc75yNrfyk Patch: http://www.vulnerability-lab.com/getcontent.php?id=1254 Check:...

McAfee ePolicy Orchestrator 4.6.0 4.6.5 - ePowner Multiple Vulnerabilities

McAfee ePolicy Orchestrator 4.6.0 4.6.5 - ePowner Multiple Vulnerabilities Exploit Title: McAfee ePolicy Orchestrator 4.6.0-4.6.5 ePowner - Multiple vulnerabilities Date: 20 November 2012 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage:...