FudgeC2 - A Collaborative C2 Framework For Purple-Teaming Written In Python3, Powershell And .NET

FudgeC2 is a campaign orientated Powershell C2 framework built on Python3/Flask - Designed for team collaboration, client interaction, campaign timelining, and usage visibility. Note: FudgeC2 is currently in alpha stage, and should be used with caution in non-test environments. Setup Installation...

CVE-2017-11559

An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json/admin/getmailserversettings" and "/api/json/dashboard/gotoverviewlist" is vulnerable to a Blind SQL Injection attack...

CVE-2019-1570

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings...

CVE-2019-1571

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings...

CVE-2019-1570

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings...

CVE-2019-1570: Improper Neutralization of Input During Web Page Generation

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings...

CVE-2019-1571: Improper Neutralization of Input During Web Page Generation

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings...

PT-2019-1690

Name of the Vulnerable Software and Affected Versions The Expedition Migration tool versions 1.1.8 and earlier Description The issue allows an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings. This is due to a lack of protection for the web page structure...

PT-2019-1691

Name of the Vulnerable Software and Affected Versions The Expedition Migration tool versions 1.1.8 and earlier Description The issue allows an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings due to insufficient protection of the web page structure. This ca...

CVE-2018-1000422

An improper authorization vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java that allows attackers to have Jenkins perform a connection test, connecting to an attacker-specified server with attacker-specified credentials and connection settings...

CMS Scanner - Scan Wordpress, Drupal, Joomla, vBulletin Websites For Security Issues

Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues. CMSScan provides a centralized Security Dashboard for CMS Security scans. It is powered by wpscan, droopescan, vbscan and joomscan. It supports both on demand and scheduled scans and has the ability to sent email reports...

Sql injection

Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...

CVE-2018-18949

Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...

CVE-2018-18949

Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...

CVE-2018-18949

Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...

CVE-2018-18949

CVE-2018-18949 affects Zoho ManageEngine OpManager 12.3 prior to build 123222. The vulnerability is a SQL injection via Mail Server settings caused by insufficient validation of the mailservername, enabling an attacker to breach the database security context. Impact is described as high/critical ...

CVE-2018-18949: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...

PT-2018-14738

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123222 Description The issue is related to SQL Injection via Mail Server settings. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123222, update to a version that includes th...

JVN#95589314: Joruri Gw vulnerable to arbitrary file upload

Joruri Gw provided by SiteBridge Inc. is groupware which runs on Ruby on Rails. Joruri Gw contains a vulnerability that may allow an attacker to upload arbitrary files CWE-434. Impact A user may upload arbitrary files. When PHP code execution is enabled on the server, a user may execute arbitrary...

Cisco WebEx Meetings Server Elevation of Privilege Vulnerability

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. An elevation of privilege vulnerability exists in Cisco WebEx Meetings Server that stems from the program's inabili...