Microsoft SQL Server NTLM Stealer

This module can be used to help capture or relay the LM/NTLM credentials of the account running the remote SQL Server service. The module will use the supplied credentials to connect to the target SQL Server instance and execute the native "xpdirtree" or "xpfileexist" stored procedure. The stored...

CentOS 6 : openldap (CESA-2012:1151)

Updated openldap packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

CentOS Update for openldap CESA-2012:1151 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Scientific Linux Security Update : openldap on SL6.x i386/x86_64 (20120808)

It was found that the OpenLDAP server daemon ignored olcTLSCipherSuite settings. This resulted in the default cipher suite always being used, which could lead to weaker than expected ciphers being accepted during Transport Layer Security TLS negotiation with OpenLDAP clients. CVE-2012-2668 This...

openldap security and bug fix update

2.4.23-26.2 - CVE-2012-2668 825875 cipher suite selection by name can be ignored default cipher suite is always selected 2.4.23-26.1 - fix: smbk5pwd module computes invalid LM hashes 820278...

John the Ripper 1.7.7 new version Released !

John the Ripper 1.7.7 new version Released ! "John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt3 password hash types commonly found on Unix...

HTTP Client MS Credential Catcher

This module attempts to quietly catch NTLM/LM Challenge hashes. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework NTLMCONST = Rex::Proto::NTLM::Constants NTLMCRYPT = Rex::Proto::NTLM::Crypt MESSAGE =...

LM Starmail Paidmail SQLi and RFI Vulnerabilities

LM Starmail Paidmail is prone to SQL injection SQLi and remote file inclusion RFI vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2009-4993

PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

Sql injection

SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-4993

LM Starmail Paidmail 2.0 is affected by CVE-2009-4993, a PHP remote file inclusion (RFI) vulnerability in home.php that allows an attacker to execute arbitrary PHP code via a URL supplied to the page parameter. The OpenVAS entry corroborates an RFI issue (and also mentions SQLi/RFI in the same pr...

CVE-2009-4992

The dataset confirms a concrete SQL injection vulnerability in LM Starmail Paidmail 2.0, specifically in paidbanner.php where the vulnerable parameter is ID. The root cause is improper handling of user input enabling arbitrary SQL execution, with remote access and no authentication required impli...

CVE-2009-4993

PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-4992

SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Simple middleman（MITM, Man-In-The-Middle attack-vulnerability warning-the black bar safety net

Used tools: ScoopLM.exe 和nt2crbf.exe the www.icehack.comyou can download With ScoopLM. exe the forward and reverse captured. ! On the figure, I is positive to capture my environment is native 1 9 2. 1 6 8. 0. 3 to 1 9 2. 1 6 8. 0. 1 0 initiate the ipc$connection ! The machine ScoopLM. exe...

LM Starmail 2.0 (SQL Injection/File Inclusion) Multiple Vulnerabilities

No description provided by source. \ \ \ / / /\ \ / /| \ / \ | \ \ //\ \ / / / / ruling the web since 9/2008 = LM Starmail 2.0 home.php & paidbanner.php SQL Injection/File Inclusion Vuln Vendor : http://www.script-shop24.de Script : LM Starmail 2.0 Download :...

LM Starmail 2.0 - SQL Injection File Inclusion

LM Starmail 2.0 - SQL Injection File Inclusion \ \ \ / / /\ \ / /| \ / \ | \ \ //\ \ / / / / ruling the web since 9/2008 = LM Starmail 2.0 home.php & paidbanner.php SQL Injection/File Inclusion Vuln Vendor : http://www.script-shop24.de Script : LM Starmail 2.0 Download :...

LM Starmail 2.0 (SQL Injection/File Inclusion) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= LM Starmail 2.0 SQL Injection/File Inclusion Multiple Vulnerabilities ======================================================================= = LM Starmail 2.0 home.ph...

LM Starmail 2.0 - SQL Injection / File Inclusion

\ \ \ / / /\ \ / /| \ / \ | \ \ //\ \ / / / / ruling the web since 9/2008 = LM Starmail 2.0 home.php & paidbanner.php SQL Injection/File Inclusion Vuln Vendor : http://www.script-shop24.de Script : LM Starmail 2.0 Download :...