DNS Record Scanner and Enumerator

This module can be used to gather information about a domain from a given DNS server by performing various DNS queries such as zone transfers, reverse lookups, SRV record brute forcing, and other techniques. This module requires Metasploit: https://metasploit.com/download Current source:...

Exploit for Path Traversal in Elegantthemes Divi

WordPressMassExploiter Mass exploiter of CVE-2015-1579 for Wor...

Apple iOS WebKit COOKIE Read/Write Vulnerability

Apple iOS is Apple's operating system for several smart devices. A security vulnerability exists in Apple iOS that could allow an attacker to construct a malicious web page, trick users into parsing it, and read and write COOKIEs to the target system...

WordPress Extredj Open Redirection

| / \ / \ | ' | | \ \ /\ / / | | | | | | '| ' \ | | | | | | | |\ V V /| || | || | | | | | | | | || || |||| // / /|| || || || Wordpress Extredj Plugin - Open Redirect Vulnerability My + Author : KnocKout Contact : [email protected] Skype : [email protected] HomePage : http://milw00rm.com -...

IBM Connections Cross-Site Request Forgery Vulnerability

IBM Connections is a suite of social software platforms. The platform provides advanced analytics and real-time data monitoring capabilities and accelerates web collaboration within and outside the organization through IBM SmartCloud services. IBM Connections suffers from a cross-site request...

smtp-ntlm-info NSE Script

This script enumerates information from remote SMTP services with NTLM authentication enabled. Sending a SMTP NTLM authentication request with null credentials will cause the remote service to respond with a NTLMSSP message disclosing information to include NetBIOS, DNS, and OS build version...

imap-ntlm-info NSE Script

This script enumerates information from remote IMAP services with NTLM authentication enabled. Sending an IMAP NTLM authentication request with null credentials will cause the remote service to respond with a NTLMSSP message disclosing information to include NetBIOS, DNS, and OS build version...

Rejetto HTTP File Server 2.3.x Remote Code Execution

!/usr/bin/python Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 04-01-2016 Remote: Yes Exploit Author: Avinash Kumar Thapa aka "-Acid" Vendor Homepage: http://rejetto.com/ Software Link: http://sourceforge.net/projects/hfs/ Version: 2.3...

SQL injection vulnerability in the oabusyusername parameter of the target/m.asp page of the PointClear MIS management information system.

PointClear MIS Management Information System is an enterprise-level instant messaging platform launched by PointClear. An SQL injection vulnerability exists in the oabusyusername parameter on the target/m.asp page of the PointClear MIS enterprise management information system, which allows...

IBM Domino Image File Parsing Buffer Overflow (CVE-2015-5040)

A buffer overflow vulnerability has been reported in IBM Domino. The vulnerability is due to improper bounds checking when parsing image files, potentially lead to an undersized buffer being allocated. A remote, unauthenticated attacker can exploit this vulnerability by sending an email containin...

Qualys Security Scanner

Qualys is a vulnerability scanning product. Remote attackers can use Qualys to detect vulnerabilities on a target server...

HP StoreOnce Backup System Cross-Site Request Forgery Vulnerability

HP StoreOnce Backup System is a disk-based backup system. A cross-site request forgery vulnerability exists in HP StoreOnce Backup System, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the target user...

target.com.br XSS vulnerability

Vulnerable URL: https://www.target.com.br/portal/asp/cadastro/opt-out.asp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=A171 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

Oracle: Security Advisory (ELSA-2015-2152)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google AOSP Email App HTML Injection

https://labs.integrity.pt/articles/google-aosp-email-app-html-injection-2/ 1. Vulnerability Properties Title: Google AOSP Email App HTML Injection CVE ID: PendingCVSSv3 Base Score: 6.3 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Vendor: Google Products: AOSP Email App Advisory Release Date: 16 November...

nje-node-brute NSE Script

z/OS JES Network Job Entry NJE target node name brute force. NJE node communication is made up of an OHOST and an RHOST. Both fields must be present when conducting the handshake. This script attemtps to determine the target systems NJE node name. To initiate NJE the client sends a 33 byte record...

Microsoft Internet Explorer Memory Corruption (MS15-112: CVE-2015-6082)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

chi.targetconnect.net XSS vulnerability

Vulnerable URL: https://chi.targetconnect.net/unauthorisedGraduate/forgottenPassword.html Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Uniscan Security Scanner

Uniscan is a vulnerability scanning product. Remote attackers can use Uniscan to detect vulnerabilities on a target server...

Sam Spade 1.14 - (Scan Addresses) Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python -- coding: cp1252 -- EXPLOIT TITLE: Sam Spade 1.14 Scan from IP address Field Exploit AUTHOR: VIKRAMADITYA "-OPTIMUS" Date of Testing: 2nd November 2015 Download Link :...