ip-forwarding NSE Script

Detects whether the remote device has ip forwarding or "Internet connection sharing" enabled, by sending an ICMP echo request to a given target using the scanned host as default gateway. The given target can be a routed or a LAN host and needs to be able to respond to ICMP requests ping in order...

IPUtils Denial Of Service

==== Description ==== An integer overflow was found in iputils/pingcommon.c mainloop function which could lead to excessive CPU usage when triggered could lead to DoS. This means that both ping and ping6 are vulnerable. ==== Proof-Of-Concept ==== Specify "big" interval -i option for ping/ping6...

TP-Link Cross Site Scripting

Exploit Title: Tp-Link Cross Site Scripting Date: 11.03.2012 Author: l20ot Web Browser : Mozilla Firefox Blog : http://www.twitter.com/l20ot ------------------------------------------------------ Vulnerability is on Ping tool. 1- Go to http://192.168.1.1/maintenance/toolstest.htm 2- make ping lik...

kernel: security and bugfix update. (important)

The openSUSE 11.4 kernel was updated to fix bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-269...

OP5 license.php Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'OP5 license.php...

Successful Shell Attack Detected - Windows 'ping' Command

Binary data 6197.prm...

Successful Shell Attack Detected - Linux 'ping' Command

Binary data 6148.prm...

MS11-083 Denial Of Service

No description provided by source. !/bin/sh cat winnuke2011.c EOF / MS11-083 DoS/PoC exploit ======================== This attempts to trigger the ICMP refCount overflow in TCP/IP stack of Win7/Vista/Win2k8 hosts. This requires sending 2^32 UDP packets to a host on a closed port, or 4,294,967,296...

MS11-083 Denial Of Service

!/bin/sh cat winnuke2011.c include include include include include include include include include include include int port; int active = 0; pthreadmutext mutexactive; void sendpacketsvoid ptr; int mainint argc, char argv pthreadt thread; int iret,lthreads; pidt pid; printf"+ MS11-083 DoS/PoC...

Multi Gather Ping Sweep

Performs IPv4 ping sweep using the OS included ping command. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Gather Ping Sweep', 'Description' = %q Performs IPv4 ping sweep using the OS...

SA500 vulnerabilities - details

Hi Advisory by Cisco was published a few days ago Bugtraq ID: 48810. Now more details: 1. Unathenticated access to web management any user - including admin. Due to blind SQLi in the login form of web management port 443, https, login field, embedded sqlite DB, there is possible to obtain: a all...

SureBackup Ping Test Timed Out

Challenge A VM or group of VMs fail to pass the SureBackup Ping Test. Solution Below is a list of the most commonly observed causes of Ping Test failures and solutions for each. A router exists between the Veeam Server and Virtual Lab. The vNIC for the Isolated Network is misconfigured. The...

CVE-2011-1646

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the 1 ping test parameter ...

CVE-2011-1646

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the 1 ping test parameter ...

DEBIAN-CVE-2011-0700

Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to 1 the Quick/Bulk Edit title aka post title or posttitle, 2 poststatus, 3 commentstatus, 4 pingstatus, and 5 escaping of tags...

CVE-2011-0700

Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to 1 the Quick/Bulk Edit title aka post title or posttitle, 2 poststatus, 3 commentstatus, 4 pingstatus, and 5 escaping of tags...

IPv6 Link Local/Node Local Ping Discovery

Send a ICMPv6 ping request to all default multicast addresses, and wait to see who responds. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IPv6 Link Local/Node Local Ping Discovery',...

BSA-011 Security Update for znc

Patrick Matthäi pmatthaei uploaded new packages for znc which fixed the following security problems: CVE-2010-2934 Multiple unspecified vulnerabilities in ZNC 0.092 allow remote attackers to cause a denial of service exception and daemon crash via unknown vectors related to "unsafe substr calls."...

BitTorrent Mainline DHT Detection

The remote host is participating in a Distributed Hash Table DHT network, an indication of a peer-to-peer file-sharing application is running on the host. Specifically, this host is using Mainline DHT, an implementation developed by the original BitTorrent client and adopted by some others. Note...

Alcatel-Lucent OmniPCX Enterprise - masterCGI Arbitrary Command Execution (Metasploit)

$Id: alcatelomnipcxmastercgiexec.rb 10556 2010-10-05 23:13:04Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...