Jenkins Domain Credential Recovery

This module will collect Jenkins domain credentials, and uses the script console to decrypt each password if anonymous permission is allowed. It has been tested against Jenkins version 1.590, 1.633, and 1.638. This module requires Metasploit: https://metasploit.com/download Current source:...

smb-vuln-regsvc-dos NSE Script

Checks if a Microsoft Windows 2000 system is vulnerable to a crash in regsvc caused by a null pointer dereference. This check will crash the service if it is vulnerable and requires a guest account or higher to work. The vulnerability was discovered by Ron Bowes while working on smb-enum-sessions...

agil.com.tn XSS vulnerability

Vulnerable URL: http://www.agil.com.tn/fr/httpdoc/search-site.php?content=%3Csvg+onload%3Dalert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.09.2015 Latest check for patch:| 22.09.2015 07:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

br.avtopizza.ru XSS vulnerability

Vulnerable URL: http://br.avtopizza.ru/site/search?query=x" Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 16:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...

Joomla com_Myblog Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications + Title : Joomla comMyblog Exploit Arbitrary File Upload Vulnerability ---------------------------------------------------- + Author : Back-DOOR ---------------------------------------------------- + Exploit by : Back-DOOR + Dork google :...

GeniXCMS 0.0.3 - register.php SQL Injection

GeniXCMS 0.0.3 - register.php SQL Injection Exploit Title: Genixcms register.php multiple SQL vuln Date: 2015-06-23 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.genixcms.org Software Link: https://codeload.github.com/semplon/GeniXCMS/zip/master/GeniXCMS-master.zip Version: 0.0.3...

Immunity Canvas: MS14_070

Name| ms14070 ---|--- CVE| CVE-2014-4076 Exploit Pack| CANVAS Description| ms14070 Notes| References: https://technet.microsoft.com/en-us/library/security/ms14-070.aspx CVE Name: CVE-2014-4076 VENDOR: Microsoft NOTES: Tested on: - Windows 2003 Standard Edition x86 SP2 English Usage: Win32/MOSDEF$...

GNU Bash - Environment Variable Command Injection (Metasploit)

require 'msf/core' class Metasploit3 'bashedCgi', 'Description' = %q Quick & dirty module to send the BASH exploit payload CVE-2014-6271 to CGI scripts that are BASH-based or invoke BASH, to execute an arbitrary shell command. , 'Author' = 'Stephane Chazelas', vuln discovery 'Shaun Colley '...

Killmonster <= 2.1 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. + Killmonster = 2.1 Auth Bypass SQL Injection Vulnerability + Discovered by cr4wl3r cr4wl3r!linuxmail.org + Download : http://scripts.ringsworld.com/games-and-entertainment/km2/ + Vuln Code : login.php form method=POST action=authenticate.php Type Username Here:...

Evernew Free Joke Script (viewjokes.php) SQL Injection

No description provided by source. / Name : Evernew Free Joke Script viewjokes.php SQL Injection WebSite : www.evernewscripts.com Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , int0x80 , geeksec.com ... a loot / VULN CODE -- viewjokes.php : $id=$HTTPGETVARS'id';...

Joomla Component com_tpjobs Blind SQL injection Vulnerability

Joomla Component comtpjobs Blind SQL injection Vulnerability author : FL0RiX Name : comtpjobs Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : TRUE+ » http://server/index.php?option=comtpjobs&task=resadvsearch&keyword=&idc=1 and 1=1 FALSE- »...

STUNSHELL Web Shell Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Blue Eye CMS <= 1.0.0 - Remote Cookie SQL Injection Vulnerability

No description provided by source. BlueEye CMS = 1.0.0 Remote Cookie SQL Injection Vulnerability found by ka0x ka0x01alt+64gmail.com Download: http://kent.dl.sourceforge.net/sourceforge/blueeyecms/blueeyecms-100preRC.rar need magicquotesgpc = Off - Vuln code: 10: if !empty$COOKIEBlueEyeCMSlogin /...

SomeryC <= 0.2.4 (include.php skindir) Remote File Inclusion Vulnerability

No description provided by source. SomeryC = v0.2.4 Remote File Include Vendor: http://someryc.mostpopularcomic.com download http://someryc.mostpopularcomic.com/sC024.zip found by: Katatafish [email protected] d0rk: powered by someryc vuln-code/admin/system/include.php: if $start...

InoutMailingListManager <= 3.1 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo InoutMailingListManager = 3.1 Command Execution Exploit + Login Retrieve + Advisory by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love ; if $argc4...

perForms Mambo Component <= 1.0 - Remote File Inclusion

No description provided by source. ------------------------------------------------------------------------ --- perForms = 1.0 mosConfigabsolutepath Remote File Inclusion ------------------------------------------------------------------------ --- Remote : Yes Critical Level : High Vuln founded i...

Batch Audio Converter Lite Edition <= 1.0.0.0 - Stack Buffer Overflow (SEH)

No description provided by source. Software Link: http://www.freesoftwaretoolbox.com/files/batchaudiosetup.exe Tested on: Windows XP SP2 Type of Vuln: SEH Code : bacon-exploit.py Greetz: Otoy, Postnix, Jasakom Community, Kilurah, Gesang, dan wedus-wedus lainnya ^^ Thanks: All OffSec member...

compteur 2.0 - (param_editor.php) Remote File Include Vulnerability

No description provided by source. Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You...

Panda Global Protection 2010 local Dos (unfiltered wcscpy())

No description provided by source. include windows.h include string.h include ddk/ntapi.h include tlhelp32.h define SystemModuleInfo 11 / Program : Panda Global Protection 2010 3.01.00 Homepage : http://www.pandasecurity.com Discovery : 2010/04/09 Author Contacted : 2010/07/15 Status of vuln :...

clean cms 1.5 (blind SQL Injection/xss) Multiple Vulnerabilities

No description provided by source. Clean CMS 1.5 Blind Sql & XSS Multiple Remote Vuln. script: http://www.4yoursite.nl/scriptcleancms.php ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi...