Fedora 16 : puppet-2.6.12-1.fc16 (2011-14880)

A bug in puppet's SSL certificate handling could allow nodes with a valid certificate to impersonate the puppet master. To be vulnerable, a user would have had to set the certdnsnames variable and generated certificates. This setting is not set by default in the Fedora/EPEL packages. This update...

Windows Recon Computer Browser Discovery

This module uses railgun to discover hostnames and IPs on the network. LTYPE should be set to one of the following values: WK all workstations, SVR all servers, SQL all SQL servers, DC all Domain Controllers, DCBKUP all Domain Backup Servers, NOVELL all Novell servers, PRINTSVR all Print Que...

hbase-master-info NSE Script

Retrieves information from an Apache HBase Hadoop database master HTTP status page. Information gathered: Hbase version Hbase compile date Hbase root directory Hadoop version Hadoop compile date Average load Zookeeper quorum server Associated region servers Script Arguments slaxml.debug See the...

DEBIAN-CVE-2011-3872

Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise PE Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to the X.509 Subject Alternative Name field of the certificate, which allows remote attackers to spoof ...

USN-1217-1: Puppet vulnerability

Kristian Erik Hermansen discovered a directory traversal vulnerability in the SSLFile indirection base class. A remote attacker could exploit this to overwrite files with the privileges of the Puppet Master...

BIOS based Virus discovered by Chinese Security Firm

BIOS based Virus discovered by Chinese Security Firm A Chinese AV company 360 discovered a new Trojan, the "BMW Virus" also called Mebromi, that can actually infect a computers BIOS: "BMW 360 Security Center virus is the latest catch of a high-risk virus, the virus that infected a chain BIOS...

Vulnerability Master 1.0 Released By MaxPain

Vulnerability Master 1.0 Released By MaxPain Video Demostartion Download Vulnerability Master 1.0...

101 Sites hacked By Swats the Toxified Crew

101 Sites hacked By Swats the Toxified Crew 101 websites Hacked by Swats The TOxified Crew members: 1. Bluff Master Hacker 2. Shashank Gupta the D3c0mpil3r 3. Sonam The Grey Hat Hacker 4. Steve Antony 5. D4rkShell Maroof Hacked Sites List : https://pastebin.com/6GHhzuY1...

101 Sites hacked By Swats the Toxified Crew

101 Sites hacked By Swats the Toxified Crew 101 websites Hacked by Swats The TOxified Crew members: 1. Bluff Master Hacker 2. Shashank Gupta the D3c0mpil3r 3. Sonam The Grey Hat Hacker 4. Steve Antony 5. D4rkShell Maroof Hacked Sites List : https://pastebin.com/6GHhzuY1...

DreamBox DM800 Arbitrary File Download Vulnerability

Exploit for hardware platform in category remote exploits Exploit Title: title Date: date Author: ShellVision Version: dm800 / !CDATA / functiontryvar...

smb-mbenum NSE Script

Queries information managed by the Windows Master Browser. Script Arguments smb-mbenum.format optional if set, changes the format of the result returned by the script. There are three possible formats: 1. Ordered by type horizontally 2. Ordered by type vertically 3. Ordered by type vertically...

broadcast-netbios-master-browser NSE Script

Attempts to discover master browsers and the domains they manage. Example Usage nmap --script=broadcast-netbios-master-browser Script Output | broadcast-netbios-master-browser: | ip server domain |10.0.200.156 WIN2K3-EPI-1 WORKGROUP Requires netbios nmap stdnse tab local netbios = require "netbio...

Unfixed XSS vulnerability at www.arbetsformedlingen.se

Security researcher MasTer, has submitted on 18/06/2011 a cross-site-scripting XSS vulnerability affecting www.arbetsformedlingen.se, which at the time of submission ranked 9155 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2012. It is...

Unfixed XSS vulnerability at www.geo.lemarx.eu

Security researcher MasTer, has submitted on 27/05/2011 a cross-site-scripting XSS vulnerability affecting www.geo.lemarx.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at bokvin.alpresor.com

Security researcher MasTer, has submitted on 27/05/2011 a cross-site-scripting XSS vulnerability affecting bokvin.alpresor.com, which at the time of submission ranked 916492 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Unfixed XSS vulnerability at wapversion.com

Security researcher MasTer, has submitted on 27/05/2011 a cross-site-scripting XSS vulnerability affecting wapversion.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at www.kamstra-travel.eu

Security researcher MasTer, has submitted on 27/05/2011 a cross-site-scripting XSS vulnerability affecting www.kamstra-travel.eu, which at the time of submission ranked 7345207 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Unfixed XSS vulnerability at www.gnresound.se

Security researcher MasTer, has submitted on 27/05/2011 a cross-site-scripting XSS vulnerability affecting www.gnresound.se, which at the time of submission ranked 13932353 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Unfixed XSS vulnerability at winstart.se

Security researcher MasTer, has submitted on 27/05/2011 a cross-site-scripting XSS vulnerability affecting winstart.se, which at the time of submission ranked 287286 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at imobile.us

Security researcher MasTer, has submitted on 25/05/2011 a cross-site-scripting XSS vulnerability affecting imobile.us, which at the time of submission ranked 1049591 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...