Setuid Tunnelblick Privilege Escalation

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require...

Mutiny Remote Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Cart Engine 3.0.0 Remote Code Execution

No description provided by source. ? Cart Engine 3.0.0 Remote Code Execution Vendor: C97net Product web page: http://www.c97.net Affected version: 3.0.0 Summary: Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE shopping cart based on PHP & MySQL...

Supermicro Onboard IPMI close_window.cgi Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GoodRanking include Msf::Exploit::Remote::HttpClient def initializeinfo...

Sophos Web Protection Appliance sblistpack Arbitrary Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

MS13-009 Microsoft Internet Explorer COALineDashStyleArray Integer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

HP AutoPass License Server File Upload Exploit

Exploit for java platform in category remote exploits This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP AutoPass License Server File Upload', 'Description' = %q This module exploit...

MS14-009 .NET Deployment Service IE Sandbox Escape

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' require 'msf/core/exploit/exe' require 'msf/core/exploit/powershell' class Metasploit3 'dfsvc' = '4.0.30319.17929.17', 'mscorlib' =...

MS13-097 Registry Symlink IE Sandbox Escape Exploit

This Metasploit module exploits a vulnerability in Internet Explorer Sandbox which allows to escape the Enhanced Protected Mode and execute code with Medium Integrity. The vulnerability exists in the IESetProtectedModeRegKeyOnly function from the ieframe.dll component, which can be abused to forc...

Microsoft Registry Symlink - IE Sandbox Escape (MS13-097) (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' require 'msf/core/exploit/exe' require 'msf/core/exploit/powershell' class Metasploit3 'MS13-097 Registry Symlink IE Sandbox Escape',...

某门户网站系统存在两处任意文件下载漏洞

简要描述： 两处。 详细说明： 看样式对比，应该是官网这个产品： http://www.threeoa.com/product/501.html 案例应该还是不少的！ 第一处下载： http://www.jmsyz.net/eeoaftp/downloadFile.action?path=WEB-INF/web.xml http://jdyz.ijd.cn/eeoaftp/downloadFile.action?path=WEB-INF/web.xml http://www.wxxqml.com/eeoaftp/downloadFile.action?path=WEB-INF/web.x...

Crowdsourcing a Tool for Application Vulnerability Research

Pulling in security help on a project has traditionally meant either hiring more full-time help, or bringing in an outside consultant. Enterprises and vendors alike, however, are starting to really go outside the perimeter these days and are taking advantage of crowdsourcing. Given the paranoia i...

Ericom AccessNow Server - Remote Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Ericom AccessNow Server Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow in Ericom AccessNow...

Rocket Servergraph Admin Center fileRequestor Remote Code Execution

Exploit for multiple platform in category remote exploits This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Rocket Servergraph Admin Center fileRequestor Remote Code Execution',...

Rocket Servergraph Admin Center - fileRequestor Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Rocket Servergraph Admin Center fileRequestor Remote Code Execution', 'Description' = %q This module abuses several directory travers...

Java - Debug Wire Protocol Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GoodRanking include Msf::Exploit::Remote::Tcp include Msf::Exploit::EXE include Msf::Exploit::FileDropper...

Easy File Management Web Server Stack Buffer Overflow

Easy File Management Web Server versions 4.0 and 5.3 contain a stack buffer overflow condition that is triggered as user-supplied input is not properly validated when handling the UserID cookie. This may allow a remote attacker to execute arbitrary code. This module requires Metasploit:...

ZeroCMS 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications ZeroCMS 1.0 articleid SQL Injection Vulnerability Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms/ Affected version: 1.0 Summary: ZeroCMS is a very simple Content Management System built using PHP and MySQL. Desc:...

ZeroCMS 1.0 SQL Injection

ZeroCMS 1.0 articleid SQL Injection Vulnerability Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms/ Affected version: 1.0 Summary: ZeroCMS is a very simple Content Management System built using PHP and MySQL. Desc: Input passed via the 'articleid' GET parameter to...

OpenSSL DTLS Fragment Buffer Overflow DoS

This module performs a Denial of Service Attack against Datagram TLS in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h. This occurs when a DTLS ClientHello message has multiple fragments and the fragment lengths of later fragments are larger than that of the first, a buffer...