Joomla XBall SQL Injection

Exploit Title : Joomla Component comxball SQL Injection Vulnerability Author : CoBRa21 E-Mail : uykucu at windowslive.com My Team : Lojistik ALLSTAR cyber-warrior.org Google Dork : inurl:index.php?option=comxball Status : High-Risk SQL Vulnerability...

General Electric D20 Password Recovery

The General Electric D20ME and possibly other units D200? feature TFTP readable configurations with plaintext passwords. This module retrieves the username, password, and authentication level list. Module Options msf use auxiliary/gather/d20pass msf undefinedd20pass show actions ...actions... msf...

membase-http-info NSE Script

Retrieves information hostname, OS, uptime, etc. from the CouchBase Web Administration port. The information retrieved by this script does not require any credentials. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size,...

redis-info NSE Script

Retrieves information such as version number and architecture from a Redis key-value store. Script Arguments creds.service, creds.global See the documentation for the creds library. Example Usage nmap -p 6379 --script redis-info Script Output PORT STATE SERVICE 6379/tcp open unknown | redis-info:...

mPDF <= 5.3 file disclosure and fix-vulnerability warning-the black bar safety net

Title: mPDF = 5.3 File Disclosure Author: ZadYree Download address: http://www.mpdf1.com/mpdf/download Affected versions: 5.3 and prior Test platform: multiple !/ usr/bin/perl-U =head1 TITLE mPDF = 5.3 File Disclosure Exploit 0day =head2 SYNOPSIS -- examples/showcode.php --...

SuSE 10 Security Update : ZMD (ZYPP Patch Number 7857)

This update of ZMD fixes the following issues : - use the certificates from openssl-certs. bnc723034 - retrieve and handle susedata.xml.gz. bnc722339 - fix restart behavior on update bnc731031 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, In...

Serv-U FTP Server - Jail Break

I m better than TESO! CONFIDENTIAL SOURCE MATERIALS! ---------------------------------------------------- Serv-U FTP Server Jail Break 0day Discovered By Kingcope Year 2011 ---------------------------------------------------- Affected: 220 Serv-U FTP Server v7.3 ready... 220 Serv-U FTP Server v7....

Apache mod_proxy - Reverse Proxy Exposure

Apache modproxy - Reverse Proxy Exposure !/usr/bin/env python import socket import string import getopt, sys knownports = 0,21,22,23,25,53,69,80,110,137,139,443,445,3306,3389,5432,5900,8080 def sendrequesturl, apachetarget, apacheport, internaltarget, internalport, resource: get = "GET " + url +...

CVE-2011-2737

RSA enVision 3.x and 4.x before 4 SP4 P3 allows remote attackers to read arbitrary files via unspecified vectors, related to an "arbitrary file retrieval vulnerability."...

Arbitrary file deletion

RSA enVision 3.x and 4.x before 4 SP4 P3 allows remote attackers to read arbitrary files via unspecified vectors, related to an "arbitrary file retrieval vulnerability."...

CVE-2011-2737

RSA enVision 3.x and 4.x prior to 4 SP4 P3 contain an arbitrary file retrieval vulnerability (CVE-2011-2737) that may allow unauthenticated remote attackers to read files via unspecified vectors. The issue is acknowledged in RSA ESA-2011-030, which recommends upgrading to RSA enVision 4 SP4 P3 as...

CVE-2011-2737

RSA enVision 3.x and 4.x before 4 SP4 P3 allows remote attackers to read arbitrary files via unspecified vectors, related to an "arbitrary file retrieval vulnerability."...

CentOS Update for fetchmail CESA-2009:1427 centos5 i386

Check for the Version of fetchmail OpenVAS Vulnerability Test CentOS Update for fetchmail CESA-2009:1427 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CentOS Update for fetchmail CESA-2009:1427 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for fetchmail CESA-2009:1427 centos3 i386

Check for the Version of fetchmail OpenVAS Vulnerability Test CentOS Update for fetchmail CESA-2009:1427 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CentOS Update for wget CESA-2009:1549 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

MyBB MyTabs Plugin - SQL Injection

MyBB MyTabs Plugin - SQL Injection ===================================================================== MyBB 0day \ MyTabs plugin SQL injection vulnerability ===================================================================== Exploit title : MyBB 0day \ MyTabs plugin SQL injection vulnerabilit...

ESA-2011-024: EMC Captiva eInput multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-024: EMC Captiva eInput multiple vulnerabilities. EMC Identifier: ESA-2011-024 CVE Identifier: CVE-2011-1743, CVE-2011-1744 Affected products: EMC SW: EMC Captiva eInput 2.1.1 Vulnerability Summary: EMC Captiva eInput contains two...

Sagem 3304 Router PPPOE Password Retrieval

!/bin/bash Exploit Title: Sagem 3304 Routers Get PPPOE Password Date 27/07/2011 Author: [email protected] Software Link: null Version: Sagem Routers F@st 3304 Tested on: Sagem F@ST 3304 Usage echo "Usage : $0 IPADDRESS" if "$1" != "" then IPADDRESS="$1" else Usage exit 1 fi USERNAME=wget...

OSForensics – Digital investigations faster

OSForensics – Digital investigations faster Here there is a new utility called OSForensics, currently it is freely available that I found very useful for conducting a computer forensics. OSForensics can retrieve data about recently accessed applications, documents, media and network shares by...