402 matches found
CVE-2017-11471
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter...
CVE-2017-11471
CVE-2017-11471 affects IDERA Uptime Monitor 7.8. SQL injection vulnerability in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter enables arbitrary SQL execution. CVSS metrics indicate high to critical impact (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploitat...
CVE-2017-11470
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter...
CVE-2017-11469
get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the filename parameter...
CVE-2017-11471
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter...
CVE-2017-11469
CVE-2017-11469 affects IDERA Uptime Monitor 7.8. get2post.php’s file_name parameter allows directory traversal, enabling reading arbitrary host files. This is a confirmed path traversal vulnerability, with the CNVD/NVD entries describing read access. No patch/versioned remediation is provided in ...
CVE-2017-11470
CVE-2017-11470 affects IDERA Uptime Monitor 7.8. The vulnerability is an SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter. NVD lists CVSS v2 base 7.5 (HIGH) and CVSS v3 base 9.8 (CRITICAL). Exploitation status is not provided in the sou...
WMI Event Subscription Persistence Exploit
This Metasploit module will create a permanent WMI event subscription to achieve file-less persistence using one of five methods. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell'...
IDERA Uptime Monitor 7.8 - Multiple Vulnerabilities
Vulnerabilities Summary The following advisory describe three 3 vulnerabilities found in IDERA Uptime Monitor version 7.8. “IDERA Uptime Monitor is a Proactively monitor physical servers, virtual machines, network devices, applications, and services across multiple platforms running on-premise,...
IDERA Uptime Monitor 7.8 - Multiple Vulnerabilities
IDERA Uptime Monitor 7.8 - Multiple Vulnerabilities Vulnerabilities Summary The following advisory describe three 3 vulnerabilities found in IDERA Uptime Monitor version 7.8. “IDERA Uptime Monitor is a Proactively monitor physical servers, virtual machines, network devices, applications, and...
WMI Event Subscription Logon Timer Persistence
This module will create a permanent WMI event subscription to achieve file-less persistence using an event filter that will trigger the payload after the system has a certain uptime. Payloads will trigger every minute until the set end time. Additionally a custom command can be specified to run...
WMI Event Subscription Persistence
This module will create a permanent WMI event subscription to achieve file-less persistence using one of five methods. The EVENT method will create an event filter that will query the event log for an EVENTIDTRIGGER default: failed logon request id 4625 that also contains a specified...
PsTools - Utilities for listing the processes running on remote computers, running processes remotely, rebooting computers, and more
The PsTools suite includes command-line utilities for listing the processes running on local or remote computers, running processes remotely, rebooting computers, dumping event logs, and more. Introduction The Windows NT and Windows 2000 Resource Kits come with a number of command-line tools that...
2016 Flare-On Challenge Solutions
I would like to thank the challenge authors this year: 1. Alexander Rich 2. Matt Williams @0xmwilliams 3. Dominik Weber 4. James T. Bennett @jtbennettjr 5. Tyler Dean 6. Josh Homan 7. Alex Berry 8. Nick Harbour @nickharbour 9. Jon Erickson @2130706433 10. FireEye Labs Advanced Vulnerability...
DMitry - Deepmagic Information Gathering Tool
DMitry Deepmagic Information Gathering Tool is a UNIX/GNULinux Command Line Application coded in C language. DMitry has the ability to gather as much information as possible about a host. Base functionality is able to gather possible subdomains, email addresses, uptime information, tcp port scan,...
Deepmagic Information Gathering Tool: DMitry
Deepmagic Information Gathering Tool DMitry Deepmagic Information Gathering Tool is a UNIX/GNU Linux Command Line program coded purely in C with the ability to gather as much information as possible about a host. DMitry has a base functionality with the ability to add new functions, the basic...
Idera Uptime Infrastructure Monitor Remote Detection
Detection of installed version of Idera Uptime Infrastructure Monitor. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
New Relic: http://newrelic.com SSRF/XSPA
A Server Side Request Forgery / Cross Site Port Attack was discovered via a POST request to http://newrelic.com/syntheticspreviews and using the parameter within the body of the request testurl. A Server Side Request Forgery vulnerability allows to issue remote connections on behalf of the affect...
