Microsoft Windows Video Control CVE-2016-7248 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows 10...

Meinberg NTP Time Server ELX800/GPS M4x 5.30p Command Execution

!/usr/bin/python EDB Note: Source https://github.com/securifera/CVE-2016-3962-Exploit EDB Note: More info https://www.securifera.com/blog/2016/07/17/time-to-patch-rce-on-meinberg-ntp-time-server/ 271 - trigger notifications 299 - copy user defined notifications Kernel Version: 2.6.15.1 System...

Meinberg NTP Time Server ELX800/GPS M4x V5.30p - Remote Command Execution / Escalate Privileges

Exploit for hardware platform in category remote exploits !/usr/bin/python EDB Note: Source https://github.com/securifera/CVE-2016-3962-Exploit EDB Note: More info https://www.securifera.com/blog/2016/07/17/time-to-patch-rce-on-meinberg-ntp-time-server/ 271 - trigger notifications 299 - copy user...

Meinberg NTP Time Server ELX800/GPS M4x V5.30p - Remote Command Execution / Escalate Privileges

!/usr/bin/python EDB Note: Source https://github.com/securifera/CVE-2016-3962-Exploit EDB Note: More info https://www.securifera.com/blog/2016/07/17/time-to-patch-rce-on-meinberg-ntp-time-server/ 271 - trigger notifications 299 - copy user defined notifications Kernel Version: 2.6.15.1 System...

TUTOS phpinfo() Information Disclosure (HTTP) - Active Check

TUTOS allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2015-8789

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document...

Th3 MMA mma.php Backdoor Arbitrary File Upload Exploit

Exploit for php platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'nokogiri' class Metasploit3 'Th3 MMA mma.php Backdoor Arbitrary File Upload', 'Descriptio...

VS-News-System <= 1.2.1 (newsordner) Remote File Include Exploit

No description provided by source. html head meta http-equiv=Content-Type content=text/html; charset=windows-1254 titleVS-News-System = V1.2.1 newsordner Remote File Include Exploit/title script language=JavaScript...

Cisco IPS Software分析引擎拒绝服务漏洞

Bugtraq ID:65665 CVE ID:CVE-2014-0718 Cisco IPS Software是一款思科开发的入侵防御系统。 Cisco IPS Software produce-verbose-alert代码存在安全漏洞，允许未验证远程攻击者使Analysis引擎变得不稳定。 漏洞是由于在启用produce-verbose-alert动作时分析引擎不正确处理分片报文，攻击者可发送特制的分片报文使受影响系统分析引擎变得不稳定，造成拒绝服务攻击。 0 Cisco IPS Software versions 7.1 Cisco IPS Software versions 7...

Hloun Support Management System 3.0 SQL Injection / Bypass

fixhashuser$COOKIE'onlineadmin'; $userquery = "SELECT FROM member WHERE username='".$memberhash'username'."' AND password='".$memberhash'password'."'"; $member = $hloun-db-fetcharray$userquery; $groupquery = "SELECT FROM group WHERE id='".$member'group'."'"; $group =...

SAP ICF /sap/public/info Service Sensitive Information Gathering

This module uses the /sap/public/info service within SAP Internet Communication Framework ICF to obtain the operating system version, SAP version, IP address and other information. This module requires Metasploit: https://metasploit.com/download Current source:...

SAP /sap/bc/soap/rfc SOAP Service RFC_SYSTEM_INFO Function Sensitive Information Gathering

This module makes use of the RFCSYSTEMINFO Function to obtain the operating system version, SAP version, IP address and other information through the use of the /sap/bc/soap/rfc SOAP service. This module requires Metasploit: https://metasploit.com/download Current source:...

NTP Clock Variables Disclosure

This module reads the system internal NTP variables. These variables contain potentially sensitive information, such as the NTP software version, operating system version, peers, and more. This module requires Metasploit: https://metasploit.com/download Current source:...

Th3 MMA mma.php Backdoor Arbitrary File Upload

This module exploits Th3 MMA mma.php Backdoor which allows an arbitrary file upload that leads to arbitrary code execution. This backdoor also echoes the Linux kernel version or operating system version because of the phpuname function. Module Options msf use exploit/multi/http/mma/backdoorupload...

Ricoh Printer Detection

The remote host is a Ricoh Printer. C Tenable, Inc. include'compat.inc'; if description scriptid50577; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/11/26"; scriptnameenglish:"Ricoh Printer Detection"; scriptsetattributeattribute:"synopsis", value: "The...

Windows Mobile 6.5 TR WinCE 5.2 MessageBox Shellcode ARM

Windows Mobile 6.5 TR WinCE 5.2 MessageBox Shellcode ARM. Shellcode exploit for windows platform / Device: HTC Touch2 System: Windows Mobile 6.5 TR WinCE 5.0.2 Addresses of functions can be different on different devices so , you can edit the functions addresses. Coded by Celil Ünüver from...

DataTrack System Multiple Vulnerabilities

This host is running DataTrack System and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpoddatatracksystemmultvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ DataTrack System Multiple Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

SAP BusinessObjects 'HappyAxis2.jsp' Information Disclosure

The SAP BusinessObjects installation on the remote web server is leaking information via '/BusinessProcessBI/axis2-web/HappyAxis.jsp'. This page contains debugging information such as local file paths, operating system version, and Java version. A remote attacker could use this information to mou...

A word to make OBLOG user password obediently sent on-vulnerability warning-the black bar safety net

As network technology gradually developed, more and more enterprises have their own website platform, through this platform, external publicity yourself, and the content so employees can better communicate technical issues and working arrangements. OBLOG as a multi-user blog publishing system in ...

awzMB 4.2 Beta 1 - Multiple Remote File Inclusions

awzMB 4.2 Beta 1 - Multiple Remote File Inclusions \|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : awzMB system Version 4.2 beta 1 Guestbook/Weblog/Contact Download : http://downloads.sourceforge.net/awzmb/awzmb4.2beta1.zip...