dns-service-discovery NSE Script

Attempts to discover target hosts' services using the DNS Service Discovery protocol. The script first sends a query for services.dns-sd.udp.local to get a list of services. It then sends a followup query for each one to try to get more information. Script Arguments max-newtargets, newtargets See...

CVE-2010-0315

WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the...

CVE-2010-0314

Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets0.href property value...

CVE-2010-0314

The connected SSV entry (SSV:19008) documents CVE-2010-0314 as a redirect-target disclosure in Apple Safari: if a site URL is placed in the HREF of a stylesheet LINK element, a user’s session can read document.styleSheets[0].href to reveal the redirect URL. It notes Safari 4.0.4 and describes the...

CVE-2010-0314

Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets0.href property value...

Preemptive Protection against HP OpenView Network Node Manager snmp.exe Oid Variable Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in HP OpenView Network Node Manager NNM CGI program snmp.exe. The NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running...

bbScript 1.1.2.1 - id Blind SQL Injection

bbScript 1.1.2.1 - id Blind SQL Injection \n\n", $argv0; exit; list, $target, $login = $argv; echo " Target username set to $login\n"; $login = concat$login; $chars = arraymergearray$chars, range48, 57, range97, 102; $pos = 1; echo " Password Hash : "; while$pos != 33 for$i = 0; $i = 16; $i++...

PhotoDiary 1.3 (lng) LFI Vulnerability

No description provided by source. PhotoDiary 1.3 lng Local File Inclusion Vulnerability Discovered by cOndemned download: http://code.google.com/p/photodiary/ source of /admin/install.php lines 9 - 15: if isset$GET'lng' $LNG = $GET'lng'; 1 else $LNG = "ITA"; include...

Kasseler CMS 1.3.4 Lite XSS Vulnerability

No description provided by source. Kasseler CMS 1.3.4 Lite XSS XSS Vulnerability Author: Gamoscu Site: www.1923turk.biz Site: http://gamoscu.wordpress.com/ Exploit: http://server/index.php?module=target&do="scriptalert;/script -------------------------------------------------------------------...

E-Smartcart SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.preproject.com ? Software: E-SMARTCART ? ? author: R3d-D3v!L ? group: 4.!.5 ? Date: 18.dec.2009 ? T!ME: 05:00 pm ? Home: WwW.xP10.ME ? ? contact:...

Sun Java JRE AWT setDiffICM Buffer Overflow

This module exploits a flaw in the setDiffICM function in the Sun JVM. The payload is serialized and passed to the applet via PARAM tags. It must be a native payload. The effected Java versions are JDK and JRE 6 Update 16 and earlier, JDK and JRE 5.0 Update 21 and earlier, SDK and JRE 1.4.223 and...

EMC Captiva PixTools Distributed Imaging ActiveX Control File Creation

EMC Captiva PixTools is a suite of software developer toolkits that provides image scanning, viewing, and processing functionality. A vulnerability has been reported in EMC Captiva PixTools. The flaw is due to unrestricted access to the "SetLogFileName" and "WriteToLog" methods, which attackers c...

Multiple Vendor AntiVirus Extended ASCII Filename Scan Bypass

Anti-Virus AV scanner software is provided by numerous vendors to enable the detection of the transfer or existence of known malicious software. There are two main scanning strategies implemented by most AV scanners - on-demand and on-access scanning. On-demand scanning occurs when a user...

myPHPupload 0.5.1 Shell Upload

| | myPHPupload 0.5.1 Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.graphiks.net/telecharger/myPHPupload.zip | | | | Exp : | | 1- Uoload your shell format "shell.php" | | 2- Go to The Pwd...

myPHPupload 0.5.1 - Arbitrary File Upload

| | myPHPupload 0.5.1 Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.graphiks.net/telecharger/myPHPupload.zip | | | | Exp : | | 1- Uoload your shell format "shell.php" | | 2- Go to The Pwd...

Web Shopping Sites Get Independent Testing

U-Test has just completed a substantive, independent review of three major e-tailing sites–Amazon, Walmart and Target– and found a gaping cross-site scripting security hole in one of them. Read the full article. The Last Watchdog...

DoubleTake/HP StorageWorks Storage Mirroring Service Authentication Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DoubleTake/H...

Update Protection against HP OpenView Network Node Manager Denial of Service

A denial of service vulnerability exists in HP OpenView Network Node Manager. The flaw is due to a design weakness when processing crafted packets sent to the server. Remote attackers could exploit this vulnerability by sending a malicious request to the affected TCP port. Successful exploitation...

PHP MultiPart Form-Data Denial of Service PoC

Exploit for unknown platform in category web applications ============================================= PHP MultiPart Form-Data Denial of Service PoC ============================================= !/usr/bin/python PHP MultiPart Form-Data Denial of Service proof of concept, 23-10-2009 Bogdan Calin...

CA BrightStor ARCserve Backup Discovery Service Denial of Service (CVE-2008-1979)

Computer Associates' CA BrightStor ARCserve Backup and Business Protection Suite families of software offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distribution operations including Backup/Restore, Data...