Squid Proxy Port Scanner

A exposed Squid proxy will usually allow an attacker to make requests on their behalf. If misconfigured, this may give the attacker information about devices that they cannot normally reach. For example, an attacker may be able to make requests for internal IP addresses against an open Squid prox...

dns-blacklist NSE Script

Checks target IP addresses against multiple DNS anti-spam and open proxy blacklists and returns a list of services for which an IP has been flagged. Checks may be limited by service category eg: SPAM, PROXY or to a specific service name. Script Arguments dns-blacklist.services string containing a...

Joomla! Plugin NoNumber Framework - Multiple Vulnerabilities

Joomla! Plugin NoNumber Framework - Multiple Vulnerabilities Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link:...

Joomla NoNumber Framework Local File Inclusion / Shell Upload

Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...

Joomla! Plugin NoNumber Framework - Multiple Vulnerabilities

Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...

NoNumber Framework Joomla! Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl Th...

Nmap NSE net: http-open-proxy

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: socks-open-proxy

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2011-1499

acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server...

Nmap NSE: Socks Open Proxy

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: Socks Open Proxy

This script attempts to check if an open socks proxy is running on the target. This is a wrapper on the Nmap Security Scanner's http://nmap.org socks-open-proxy.nse. OpenVAS Vulnerability Test $Id: gbnmapsocksopenproxy.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap Socks Open Proxy NSE...

Nmap NSE: HTTP Open Proxy

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-6882: Improper Input Validation

Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...

socks-open-proxy NSE Script

Checks if an open socks proxy is running on the target. The script attempts to connect to a proxy server and send socks4 and socks5 payloads. It is considered an open proxy if the script receives a Request Granted response from the target port. The payloads try to open a connection to...

HTTP Proxy Server Detection

A HTTP proxy server is running at this Host and accepts unauthenticated requests from the scanner. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Joomla! Component live chat - SQL Injection Open Proxy

Joomla! Component live chat - SQL Injection Open Proxy Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don'...

Joomla Live Chat SQL Injection

Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don't sanitize the variable 'last': $last = isset$GET'last'...

Joomla! Component live chat - SQL Injection / Open Proxy

Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don't sanitize the variable 'last': $last = isset$GET'last'...

http-open-proxy NSE Script

Checks if an HTTP proxy is open. The script attempts to connect to www.google.com through the proxy and checks for a valid HTTP response code. Valid HTTP response codes are 200, 301, and 302. If the target is an open proxy, this script causes the target to retrieve a web page from www.google.com...

CVE-2004-2061

RiSearch shows a vulnerability in the show.pl CGI script that allows an attacker to use the remote host as an open proxy and to read arbitrary local files by passing a url parameter with http://, ftp://, or file://. Affected software/versions include RiSearch 1.0.01 and RiSearch Pro 3.2.06. The u...