2603 matches found
R-Scripts VRS 7R Cross Site Request Forgery / Cross Site Scripting Vulnerabilities
PHP Vacation Rental Script version 7R suffers from cross site request forgery and cross site scripting vulnerabilities. R-Scripts VRS 7R Multiple Stored XSS And CSRF Vulnerabilities Vendor: R-Scripts Product web page: http://www.r-scripts.com Affected version: 7R Summary: PHP Vacation Rental Scri...
R-Scripts VRS 7R Multiple Stored XSS And CSRF Vulnerabilities
Summary PHP Vacation Rental Script is the best solution for your vacation rentals online business. Description The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions...
Safari User-Assisted Applescript Exec Attack Exploit
Exploit for macOS platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Safari User-Assisted Applescript Exec Attack', 'Description' = %q In versions...
Safari User-Assisted Applescript Exec Attack
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Safari User-Assisted Applescript Exec Attack', 'Description' = %q In versions of Mac OS X before 10.11.1, the applescript:// URL...
r-undelete.com XSS vulnerability
Vulnerable URL: http://www.r-undelete.com/scripts/ssserver Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 08:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 633002 Google Pagerank| 4 VIP website status:| N...
r-tt.com XSS vulnerability
Vulnerable URL: http://www.r-tt.com/scripts/ssserver Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 08:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 34397 Google Pagerank| 5 VIP website status:| Yes Chec...
大华摄像头 IPC-HF2100 2.420.0000.0.R onvif 协议身份认证漏洞
大华摄像头onvif协议的snapshot接口访问不需要身份认证，允许攻击者可直接获得摄像头实时视频图像。 poc：http://ipaddr//onvifsnapshot//...
Linux/x86-64 - execve Shellcode (22 bytes)
;Title: execve shellcode 22 bytes ;Author: d4sh&r ;Contact: https://mx.linkedin.com/in/d4v1dvc ;Category: Shellcode ;Architecture:linux x8664 ;SLAE64-1379 ;Description: ;Shellcode in 22 bytes to get a shell ;Tested on : Linux kali64 3.18.0-kali3-amd64 1 SMP Debian 3.18.6-1kali2 x8664 GNU/Linux...
PHP 5.4/5.5/5.6 - SplDoublyLinkedList 'Unserialize()' Use-After-Free
Yet Another Use After Free Vulnerability in unserialize with SplDoublyLinkedList Taoguang Chen - Write Date: 2015.8.27 Release Date: 2015.9.4 A use-after-free vulnerability was discovered in unserialize with SplDoublyLinkedList object's deserialization and crafted object's wakeup magic method tha...
Bettercap - New MITM Framework
Document Title: =============== Bettercap - New MITM Framework References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1565 Download: https://www.vulnerability-lab.com/resources/documents/1565.pdf Release Date: ============= 2015-08-09 Vulnerability Laboratory ID VL-ID:...
CVE-2001-1594
GE Healthcare eNTEGRA P&R has a password of 1 entegra for the entegra user, 2 passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, 3 0 for the entegra user of the Codonics printer FTP service, 4 eNTEGRA for the eNTEGRA P&R user account, 5 insite for the WinVNC Login, and...
CVE-2001-1594
CVE-2001-1594 relates to GE Healthcare eNTEGRA P&R and is mapped to default/hard-coded credentials across multiple GE devices (eNTEGRA 2.0/2.5 Workstation, and related imaging products). The connected sources confirm that the vulnerability enables authentication bypass by using known passwords (e...
CVE-2001-1594
GE Healthcare eNTEGRA P&R has a password of 1 entegra for the entegra user, 2 passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, 3 0 for the entegra user of the Codonics printer FTP service, 4 eNTEGRA for the eNTEGRA P&R user account, 5 insite for the WinVNC Login, and...
r-troyka.ru XSS vulnerability
Vulnerable URL: http://www.r-troyka.ru/products/babyfood/products/babyfood/?HIDDENNAME=%22%3E%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...
Wendy Nather on the Retail Cyber Intelligence Sharing Center
Dennis Fisher talks with Wendy Nather about her new role as the research director at R-CISC, the challenges of getting companies to share threat intelligence, how smaller retails can deal with breaches and threats, and how the government can play a role in information sharing. Download:...
Audio Share 2.0.2 Cross Site Scripting / Remote File Inclusion Vulnerabilities
Audio Share version 2.0.2 suffers from cross site scripting and remote file inclusion vulnerabilities. | Title : Audio Share v2.0.2 Multi Vulnerability | Author : indoushka | email : email protected | Dork : Powered by AudioShareScript.com | Tested on: windows 8.1 Français V.Pro | Download :...
Private Shell SSH Client 3.3 - Crash PoC
Exploit for windows platform in category dos / poc ''' Exploit title: privateshell SSH Client v.3.3 denial of service vulnerability Date: 27-5-2015 Vendor homepage: www.privateshell.com Software Link: http://www.privateshell.com/files/pshell.exe Version: 3.3 Author: 3unnym00n Details: -------- wh...
Cross-Site Scripting vulnerability in EMC M&R (Watch4net) Alerting Frontend
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in EMC M&R Watch4net Alerting Frontend ------------------------------------------------------------------------ Han Sahin, November 2014...
EMC M&R (Watch4net) data storage collector credentials are not properly protected
------------------------------------------------------------------------ EMC M&R Watch4net data storage collector credentials are not properly protected ------------------------------------------------------------------------ Han Sahin, November 2014...