IBM Rational AppScan企业平台验证代码执行漏洞

Bugtraq ID: 53247 CVE ID：CVE-2012-0736 IBM Rational AppScan是一款Web应用的安全测试工具，可以在开发生命周期中进行自动化动态和静态安全漏洞扫描。 IBM Rational AppScan企业版在某些配置下创建扫描作业时存在错误，允许远程攻击者执行任意代码。诱使用户扫描恶意WEB站，可在目标用户系统上执行任意代码。 0 IBM Rational Policy Tester 8.5 IBM Rational AppScan Reporting Console 8.0.1.1 IBM Rational AppScan Reportin...

CRUNCH TV SHOW - Live Stream & Security Videos

Document Title: =============== CRUNCH TV SHOW - Live Stream & Security Videos References: =========== Download: http://www.vulnerability-lab.com/resources/videos/508.mov View: http://www.youtube.com/watch?v=G9ECcxvB0dQ Release Date: ============= 2012-04-10 Vulnerability Laboratory ID VL-ID:...

HITB2011KUL - Skype Vulnerabilities 0Day Exploitation

Document Title: =============== HITB2011KUL - Skype Vulnerabilities 0Day Exploitation References: =========== Download: http://www.vulnerability-lab.com/resources/videos/394.wmv View: http://www.youtube.com/watch?v=K4g86hVQ1wk Release Date: ============= 2012-03-30 Vulnerability Laboratory ID...

CoffeeCup Mail Testing Authentication Bypass

Exploit Title: CoffeeCup Mail Tester Bypass Authentication Date: 23-feb-2012 Author: Benjamin Oviedo aka-- H4CKULT1M4T3 mail: [email protected] Software Link: http://www.coffeecup.com Version: Tested on: php Product Description: / CC Mail Tester Written by: CoffeeCup Software's David R. A sma...

Penetration Tester Productivity Tool: MagicTree

MagicTree is a penetration tester productivity tool. It is designed to allow easy and straightforward data consolidation, querying, external command execution and yeah! report generation. In case you wonder, “Tree” is because all the data is stored in a tree structure, and “Magic” is because it i...

Android Network Toolkit (ANTI) Review - Pentest at the push of a button

This Post reviews the newly released ANTI3 version. We've received a platinum account of ANTI3, before its official release, and this is our review: Recently White-Hat Hacker, Itzhak "Zuk" Avraham, the founder of zImperium unveiled its new app in Blackhat / Defcon19, introducing a new concept whe...

Mambo N-Shop SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-shop SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-shop Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Namskeid Cross Site Scripting

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-namskeid XSS & HTML Injection Vulnerability Google Dork: inurl:index.php?option=comn-namskeid Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo AHS Shop SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comahsshop SQL Injection Vulnerability Google Dork: inurl:index.php?option=comahsshop Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Frettir SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-frettir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-frettir Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Myndir SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-myndir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-myndir Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Gallery SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-gallery SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-gallery Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Skyrslur Cross Site Scripting

------------------------------------------------------------------------------------------------------------------------------- Exploit Title: Mambo Component comn-skyrslur XSS & HTML Injection Vulnerability Google Dork: inurl:index.php?option=comn-skyrslur Date: 01/09/2011 Author: CoBRa21...

Mambo N-Press SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-press SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-press Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo Component com_n-myndir SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-myndir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-myndir Date: 01/09/2011...

Citrix EdgeSight Load Tester (ESLT) version detection

Binary data citrixesltdetect.nbin...

Citrix EdgeSight Load Tester Buffer Overflow

A stack overflow vulnerability exists in the Citrix EdgeSight Load Tester software installed on the remote host. By sending a specially crafted message to the server, a remote attacker can leverage this vulnerability to execute arbitrary code on the server as the SYSTEM account. Versions prior to...

Nmap NSE net: smb-enum-processes

Pulls a list of processes from the remote server over SMB. This will determine all running processes, their process IDs, and their parent processes. It is done by querying the remote registry service, which is disabled by default on Vista; on all other Windows versions, it requires Administrator...

cPanel < 11.25 CSRF - Add User php Script

Exploit for php platform in category web applications Exploit Title: cPanel " Afterwards simply check for ninjashell.php in the directory. III. Counter-measures All cPanel versions starting from 11.25 and above have two in-built security features to prevent such attacks - security tokens and...

cPanel 11.25 - Cross-Site Request Forgery (Add User PHP Script)

cPanel 11.25 - Cross-Site Request Forgery Add User PHP Script Exploit Title: cPanel " Afterwards simply check for ninjashell.php in the directory. III. Counter-measures All cPanel versions starting from 11.25 and above have two in-built security features to prevent such attacks - security tokens...