Useresponse 1.0.2 Backdoor / CSRF / Code Execution

!/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns found by bcoles @bclose and mrme @netninja exploit by...

PowerSploit

This project is no longer supported PowerSploit is a col...

ArticleSetup 1.11 Cross Site Scripting / SQL Injection

Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.articlesetup.com/ Advisory : http://secpod.org/blog/?p=497 http://secpod.org/advisories/SecPodArticleSetupMultipleVuln.txt...

ArticleSetup - Multiple Persistence Cross-Site Scripting SQL Injections

ArticleSetup - Multiple Persistence Cross-Site Scripting SQL Injections Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.articlesetup.com/ Advisory :...

ArticleSetup - Multiple Persistence Cross-Site Scripting / SQL Injections

Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.articlesetup.com/ Advisory : http://secpod.org/blog/?p=497 http://secpod.org/advisories/SecPodArticleSetupMultipleVuln.txt...

voldemort-info NSE Script

Retrieves cluster and store information from the Voldemort distributed key-value store using the Voldemort Native Protocol. Example Usage nmap -p 6666 --script voldemort-info Script Output PORT STATE SERVICE 6666/tcp open irc | voldemort-info: | Cluster | Name: mycluster | Id: 0 | Host: localhost...

op5 Monitor Persistent Session Cookie

The remote web server has a version of op5 Monitor that improperly handles session cookies. The application sets an expiry date on cookies, causing logins to persist across sessions. Additionally, cookies are not reissued after login. Note that most versions affected by this vulnerability are als...

MySQL < 4.1.21 / 5.0.24 Privilege Persistence

The version of MySQL installed on the remote host is earlier than 4.1.21 / 5.0.24 and thus reportedly allows a local user to access a table after his privileges on it were revoked. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17802; scriptversion"1.5";...

Content Papst CMS v2011.2 - Multiple Web Vulnerabilities

Document Title: =============== Content Papst CMS v2011.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=363 Release Date: ============= 2011-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 36...

A Doomsday Worm - The Sputnik of 2011

We had an Interesting Article by "Paul F Renda" in our The Hacker News Magazine's November Edition. We would Like to share this article with our website readers also. You can Download November Issue Here. This is a theoretical prima to bring out a discussion about whether an Internet doomsday wor...

Adobe Website Cross Site Scripting

Title: ====== Adobe Web-Site Persistence XSS Status: ======== Unpatched Details: ======== 1. Signin to adobe.com 2. Go to My information 3. Change Screen Name to 'alert"xss"; or 'alert"xss"; 4. Go to My adobe @Asish [email protected]...

VMware.com Cross Site Scripting

alertdocument.cookie&category=all&isVmwareReadySelected=no Persistence Cross-Site Scripting Create a account in VMWARE. Insert First Name as : test "/alertdocument.cookie., Inserted script stored as first name. Login to vmware, Select Login to as Manage Orders, Inserted script get execute...

Argus Surveillance DVR v2.3 & 4.x - Multiple Vulnerabilities

Document Title: =============== Argus Surveillance DVR v2.3 & 4.x - Multiple Vulnerabilities Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 227 Abstract Advisory Information: ============================== Vulnerability Lab Team...

appRain Quick Start Edition Core Edition Multiple 0.1.4-Alpha - Cross-Site Scripting

appRain Quick Start Edition Core Edition Multiple 0.1.4-Alpha - Cross-Site Scripting Title : appRain Quick Start Edition Core Edition Multiple Persistence Cross-Site Scripting Vulnerabilities. Author : Antu Sanadi from SecPod Technologies www.secpod.com Vendor : http://www.apprain.com/ Advisory :...

appRain Quick Start Edition Core Edition Multiple XSS Vulnerabilities

Exploit for php platform in category web applications Title : appRain Quick Start Edition Core Edition Multiple Persistence Cross-Site Scripting Vulnerabilities. Author : Antu Sanadi from SecPod Technologies www.secpod.com Vendor : http://www.apprain.com/ Advisory : http://secpod.org/blog/?p=215...

appRain Quick Start Edition Core Edition Multiple 0.1.4-Alpha - Cross-Site Scripting

Title : appRain Quick Start Edition Core Edition Multiple Persistence Cross-Site Scripting Vulnerabilities. Author : Antu Sanadi from SecPod Technologies www.secpod.com Vendor : http://www.apprain.com/ Advisory : http://secpod.org/blog/?p=215...

Debian Security Advisory DSA 2223-1 (doctrine)

The remote host is missing an update to doctrine announced via advisory DSA 2223-1. OpenVAS Vulnerability Test $Id: deb22231.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2223-1 doctrine Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Novell iPrint Client ienipp.ocx persistence parameter parsing buffer overflow

Added: 01/28/2010 CVE: CVE-2009-1569 BID: 37242 OSVDB: 60804 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...

Novell iPrint Client ienipp.ocx persistence parameter parsing buffer overflow

Added: 01/28/2010 CVE: CVE-2009-1569 BID: 37242 OSVDB: 60804 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow in ienipp.ocx allows command...

Design/Logic Flaw

Argument injection vulnerability in the chromehtml: protocol handler in Google Chrome before 1.0.154.59, when invoked by Internet Explorer, allows remote attackers to determine the existence of files, and open tabs for URLs that do not satisfy the IsWebSafeScheme restriction, via a web page that...