HP Release Control - (Authenticated) XML External Entity (Metasploit)

HP Release Control - Authenticated XML External Entity Metasploit This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Release Control Authenticated XXE', 'Description' = %q This modu...

[Twitter Password Dump v2.0] Command-line Tool to Recover Twitter Password from Web Browsers

Twitter Password Dump is the command-line tool to instantly recover your lost Twitter password from all the popular web browsers. Currently it can recover your Twitter password from following applications, Firefox Internet Explorer v6.x - v10.x Google Chrome Chrome Canary/SXS CoolNovo Browser Ope...

[Browser Password Dump v2.0] Command-line Tool to Recover Login Password from Web Browsers

Browser Password Dump is the free command-line tool to instantly recover your lost password from all the popular web browsers. Currently it can recover stored web login passwords from following browsers. Firefox Internet Explorer Google Chrome Chrome Canary/SXS CoolNovo Browser Opera Browser Appl...

[Wi-Fi Password Dump] Command-line Tool to Recover Wireless Passwords

WiFi Password Dump is the free command-line tool to quickly recover all the Wireless account passwords stored on your system. It automatically recovers all type of Wireless Keys/Passwords WEP/WPA/WPA2 etc stored by Windows Wireless Configuration Manager. For each recovered WiFi account, it displa...

[SECURITY] Fedora 20 Update: ruby-2.0.0.353-16.fc20

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

[Resolver v1.0.9] The reverse/bruteforce DNS lookup

Resolver is a windows based tool which designed to preform a reverse DNS Lookup for a given IP address or for a range of IP’s in order to find its PTR. Updated to Version 1.0.3 added dns records brute force. Resolver features: Resolve a Single IP Resolve an IP Range Resolve IP’s provided in a tex...

[Twitter Password Decryptor v4.0] Recover Twitter Password

Twitter Password Decryptor is the FREE software to instantly recover Twitter account passwords stored by popular web browsers. Most web browsers store the login passwords for visited websites so that user don't have to remember and enter the password every time. Each of these web browsers use the...

Adult Webmaster Script Password Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: Yagina.com Adult Webmaster Script Admin Password Disclosure Category:webapps Description software : software website for webmasters promoting adult companies through referrals Date: 21-1-2013 Exploit Author: Dshellnoi Unix Vendo...

Adult WebMaster Script - Password Disclosure

Exploit Title: Yagina.com Adult Webmaster Script Admin Password Disclosure Category:webapps Description software : software website for webmasters promoting adult companies through referrals Date: 21-1-2013 Exploit Author: Dshellnoi Unix Vendor Homepage: http://www.yagina.com/ Software Link:...

CVE-2009-5134

Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions before 1.8.3 Build 16010, allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a text file containing a...

[SECURITY] Fedora 17 Update: ruby-1.9.3.194-17.fc17

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

AVCon - DEP Bypass

DEP Bypass for OptIn/OptOut all modules used are not aslr aware script produces a text file, copy the contents paste in the input field next to the call button discovered by Dillon Beresford import sys from struct import pack print "\n=====================" print "AVCon H323 DEP Bypass" print "...

AVCon DEP Bypass

Exploit for windows platform in category local exploits DEP Bypass for OptIn/OptOut all modules used are not aslr aware script produces a text file, copy the contents paste in the input field next to the call button discovered by Dillon Beresford import sys from struct import pack print...

[SECURITY] Fedora 14 Update: dokuwiki-0-0.8.20110525.a.fc14

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at crea ting documentation of any kind. It has a simple but powerful syntax which makes sure the datafiles remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

AOL Desktop .rtx File Buffer Overflow

Added: 03/18/2011 BID: 46129 OSVDB: 70741 Background AOL Desktop is an internet suite that integrates a web browser, media player, and IM client. Problem A heap overflow vulnerability exists in the Rich Text file parser of AOL Desktop 9.x. In documents with HTML links, the parser does not properl...

AOL Desktop .rtx File Buffer Overflow

Added: 03/18/2011 BID: 46129 OSVDB: 70741 Background AOL Desktop is an internet suite that integrates a web browser, media player, and IM client. Problem A heap overflow vulnerability exists in the Rich Text file parser of AOL Desktop 9.x. In documents with HTML links, the parser does not properl...

AOL Desktop .rtx File Buffer Overflow

Added: 03/18/2011 BID: 46129 OSVDB: 70741 Background AOL Desktop is an internet suite that integrates a web browser, media player, and IM client. Problem A heap overflow vulnerability exists in the Rich Text file parser of AOL Desktop 9.x. In documents with HTML links, the parser does not properl...

Wake-on-LAN

This script will send a WoL Wake-On-LAN packet to each MAC address listed in file uploaded via its preference. To use this feature : - The scanner must be located on the same physical subnet as the targets. - The MAC addresses of the targets must be listed in a text file supplied via the policy...

Simpli Easy Newsletter 4.2 Cross Site Scripting

Simpli Easy AFC Simple Newsletter " method="post" Proof-of-concept: http://www.example.com/cp.php?do="alert1 2. Information Leakage By default, application saves subscribed email addresses and correspondent IP addresses to plain text file el.txt Proof-of-concept: http://www.example.com/el.txt...

Simpli Easy (AFC Simple) Newsletter <= 4.2 XSS/Information Leakage

Exploit for php platform in category web applications ==================================================================== Simpli Easy AFC Simple Newsletter " method="post" Proof-of-concept: http://www.example.com/cp.php?do="alert1 2. Information Leakage By default, application saves subscribed...