7522 matches found
DSA-2984-1 acpi-support - security update
Bulletin has no description...
PwnPi - A Pen Test Drop Box distro for the Raspberry Pi
PwnPi is a Linux-based penetration testing dropbox distribution for the Raspberry Pi. It currently has 200+ network security tools pre-installed to aid the penetration tester. It is built a stripped down version of the Debian Wheezy image from the Raspberry Pi foundation's website and uses Openbo...
Havex, It’s Down With OPC
FireEye recently analyzed the capabilities of a variant of Havex referred to by FireEye as “Fertger” or “PEACEPIPE”, the first publicized malware reported to actively scan OPC servers used for controlling SCADA Supervisory Control and Data Acquisition devices in critical infrastructure e.g., wate...
Egresser - Tool to Enumerate Outbound Firewall Rules
Egresser is a tool to enumerate outbound firewall rules, designed for penetration testers to assess whether egress filtering is adequate from within a corporate network. Probing each TCP port in turn, the Egresser server will respond with the client’s source IP address and port, allowing the clie...
释锐教育区校版电子书包教学平台XSS漏洞
简要描述： 看到http://www.wooyun.org/bugs/wooyun-2010-051965过了，我也来了 存储型xss 详细说明： 利用官方demo测试 http://demo.31390.com:8080/eLearning/user.html 随意点击一个用户 在留言处写入xss语句 点击留言试试 直接就给弹了。。 看看源代码 毫无过滤 测试地址：http://demo.31390.com:8080/eLearning/message/s800.html 其实本身是html文件，给予xss很大空间 测试一下通用性...
DSA-2977-1 libav - security update
Bulletin has no description...
ODAT - Oracle Database Attacking Tool
ODAT Oracle Database Attacking Tool is an open source penetration testing tool that test the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid SIDs and credentials in order to connect to the database You have a val...
Cross site scripting
Cross-site scripting XSS vulnerability in diagnostics/test.php in the Social Connect plugin 1.0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the testing parameter...
CVE-2014-4551
Cross-site scripting XSS vulnerability in diagnostics/test.php in the Social Connect plugin 1.0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the testing parameter...
Windows 7 IIS7.5 FTPSVC UNAUTH'D Remote DoS PoC
No description provided by source. import socket, sys print \n print ---------------------------------------------------------------- print | Windows 7 IIS7.5 FTPSVC UNAUTH'D REMOTE DOS POC | print | Matthew Bergin, Bergin Penetration Testing | print | Win7 Ultimate v6.1 build 7600, IIS...
Windows Xp Home Edition SP2 English (calc.exe) 37 bytes
No description provided by source. / Windows Xp Home edition SP2 english calc.exe 37 bytes shellcode by: Hazem mofeed Aka Hakxer penetration testing labs www.pentestlabs.com / char evil = \xeb\x16\x5b\x31\xc0\x50\x53\xbb\x8d\x15\x86\x7c\xff\xd3\x31\xc0...
eIQNetworks ESA Topology DELETEDEVICE Overflow
No description provided by source. $Id: eiqnetworksesatopology.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Agnitum Outpost Firewall 4.0 Outpost_IPC_HDR Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24284/info Outpost Firewall is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to block arbitrary processes, denying service to legitimate users. This issue affects Outpost Firewall 4....
WINMOD 1.4 - (.lst) Local Stack Overflow Exploit
No description provided by source. !/usr/bin/perl Winmod 1.4 .lst Local Stack Overflow Exploit Exploit by CWH Underground Tested on Win XP SP2 EN Download: http://www.software112.com/products/winmod+download.html print \n==================================================\n; print Winmod 1.4 .lst...
Facebook Profile MyBB Plugin 2.4 - Persistant XSS
No description provided by source. Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS...
Poison Ivy 2.3.2 C&C Server Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Pixie CMS 1.0 - Multiple Local File Inclusion Vulnerabilities
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-005 Application: Pixie CMS Versions Affected: 1.0 Vendor URL: http://www.getpixie.co.uk/ Bug: Multiple Local File Include Exploits: YES Reported: 29.08.2008 Vendor Response: 30.08.2008 Solution: NONE Date...
FtpXQ Server 3.01 MKD Command Remote Overflow DoS
No description provided by source. source: http://www.securityfocus.com/bid/20721/info DataWizard FtpXQ Server is prone to multiple remote vulnerabilities: - A remote denial-of-service issue occurs because the application fails to perform adequate bounds checks on user-supplied data before copyin...
Tutti Nova <= 1.6 (TNLIB_DIR) Remote File Include Vulnerability
novalib/class.novaEdit.mysql.php 代码中对TNLIBDIR变量校验不严格。 利用方法： !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '63860' ssvid version = '1.0' author = '皮皮' vulDate = '2006-08-21'...
PHP Captcha / Securimage 2.0.2 - Authentication Bypass - SO-11-007
No description provided by source. Sense of Security - Security Advisory - SOS-11-007 Release Date. 20-May-2011 Last Update. - Vendor Notification Date. 04-Apr-2011 Product. Securimage / PHPCaptcha Platform. PHP Affected versions. 1.0.4 - 2.0.2 Severity Rating. Medium Impact. Authentication bypas...