http-phpself-xss NSE Script

Crawls a web server and attempts to find PHP files vulnerable to reflected cross site scripting via the variable $SERVER"PHPSELF". This script crawls the webserver to create a list of PHP files and then sends an attack vector/probe to identify PHPSELF cross site scripting vulnerabilities. PHPSELF...

Wireless Penetration Testing Series Part 2: Basic concepts of WLANs

Wireless Penetration Testing Series Part 2: Basic concepts of WLANs This blog post is in continuation of the Wireless Penetration Testing and Hacking series we started Part 1: Getting Started with Monitoring and Injection on the basis of the "SecurityTube Wi-Fi Security Expert" SWSE course which ...

broadcast-pc-duo NSE Script

Discovers PC-DUO remote control hosts and gateways running on a LAN by sending a special broadcast UDP probe. Script Arguments broadcast-pc-duo.timeout specifies the amount of seconds to sniff the network interface. default varies according to timing. -T3 = 5s Example Usage nmap --script...

UDP Service Prober

Detect common UDP services using sequential probes This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'UDP Service Prober', 'Description' = 'Detect common UDP services using...

kernel: usb: buffer overflow in auerswald_probe()

Buffer overflow in the auerswaldprobe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system...

PT-2020-7060

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.27 Description The issue is related to a buffer overflow in the auerswald probe function within the Auerswald Linux USB driver. This allows physically proximate attackers to execute arbitrary code, cause a...

Operation Hackerazzi : FBI arrests alleged Hacker for Stealing naked photos of Hollywood stars

Operation Hackerazzi : FBI arrests alleged Hacker for Stealing naked photos of Hollywood stars FEDERAL officials on Wednesday arrested a 35-year-old Florida man,Christopher Chaney and charged him with 26 counts of cyber-related crimes against Hollywood stars following an 11-month federal probe...

Fedora 15 : libvirt-0.8.8-7.fc15 (2011-9091)

Fix for CVE-2011-2178, regression introduced in disk probe logic, Fix for CVE-2011-2511, integer overflow in VirDomainGetVcpus Make commandtest more robust, Add ARM to NUMA excludes Add several build and runtime dependencies to specfile Note that Tenable Network Security has extracted the precedi...

Nmap NSE net: ipidseq

Classifies a host's IP ID sequence test for susceptibility to idle scan. Sends six probes to obtain IP IDs from the target and classifies them similarly to Nmap's method. This is useful for finding suitable zombies for Nmap's idle scan '-sI' as Nmap itself doesn't provide a way to scan for these...

Nmap NSE net: firewalk

Tries to discover firewall rules using an IP TTL expiration technique known as firewalking. The scan requires a firewall or 'gateway' and a metric or 'target'. For each filtered port on the target, send a probe with an IP TTL one greater than the number of hops to the gateway. The TTL can be give...

CVE-2010-4738: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to 1 multi/city.asp in the Multi Agent System and 2 resulttype.asp in the Single Agent System...

PT-2011-1688

Name of the Vulnerable Software and Affected Versions Rae Media INC Real Estate Single and Multi Agent System version 3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the probe parameter to two specific API endpoints: "multi/city.asp" in th...

CVE-2010-2638

Unspecified vulnerability in IBM WebSphere MQ 7.0 before 7.0.1.5 allows remote authenticated users to cause a denial of service disk consumption via vectors that trigger an FDC with an RM680004 Probe Id value...

CVE-2010-2638: Undefined Security Weakness

Unspecified vulnerability in IBM WebSphere MQ 7.0 before 7.0.1.5 allows remote authenticated users to cause a denial of service disk consumption via vectors that trigger an FDC with an RM680004 Probe Id value...

PT-2010-4164

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 7.0 through 7.0.1.4 Description The issue allows remote authenticated users to cause a denial of service, specifically disk consumption, by triggering an FDC with an RM680004 Probe Id value. Recommendations For IBM...

Broadcom Wireless Driver Probe Response SSID Overflow

Broadcom Wireless Driver Probe Response SSID Overflow. CVE-2006-5882. Remote exploit for hardware platform $Id: broadcomwifissid.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the...

Google WiFi Privacy Probe Widens

Any penance Google could ultimately pay for violating privacy sentiments across the planet has become a bit more unpredictable. Canada became the latest nation to launch a formal investigation into Google’s practice of harvesting personal Wi-Fi data from open wireless networks all across the...

DB2 Probe Utility

This module queries a DB2 instance information. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DB2 Probe Utility', 'Description' = 'This module queries a DB2 instance information.', 'Author' =...

Service Detection (unknown) with nmap

This plugin performs service detection. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later For those who wish to go digging, please note that...

CVE-2009-3486

Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...