Whitney Walton Internet behavior management system /base/message/welcome_pc.php parameter id SQL injection vulnerability

0x01 vulnerability description Whitney Walton Internet behavior management system in page/base/message/welcomepc. php for the GET parameter id filter is not strict, led to the emergence of SQL injection vulnerability. 0x02 vulnerability details File: base/message/welcomepc.php ? php $thisfile =...

Cutie Patootie-Welcome to Town - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cutie Patootie-Welcome to Town published at the 'play' market has multiple vulnerabilities...

Shopkins: Welcome to Shopville - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Shopkins: Welcome to Shopville published at the 'play' market has multiple vulnerabilities...

Adobe Experience Manager (AEM) Detection (HTTP)

HTTP based detection of Adobe Experience Manager AEM. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

obby Service Detection

The script checks the presence of an obby service. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

mailman security and bug fix update

3:2.1.12-25 - fix CVE-2002-0389 - local users able to read private mailing list archives 3:2.1.12-24 - fix CVE-2015-2775 - directory traversal in MTA transports 3:2.1.12-23 - fix 1095359 - handle update when some mailing lists have been created by newer Mailman than this one 3:2.1.12-22 - fix...

OP5 5.3.5/5.4.0/5.4.2/5.5.0/5.5.1 - 'welcome' Remote Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'OP5 welcome Remote Command Execution', 'Description' = %q This module exploits an arbitrary root command execution vulnerabilit...

phpldapadmin 0.9.6/0.9.7 welcome.php custom_welcome_page Variable Arbitrary File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/14695/info phpldapadmin is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. phpldapadmin is prone to a directory traversal...

MDaemon Mailer Daemon 11.0.1 - Remote File Disclosure

No description provided by source. MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure Bug Found & Exploited by Kingcope May 2010 The latest version at the time of this advisory is vulnerble to the attack. It seems all files which the SYSTEM account can read can be accessed remotel...

CrystalFTP Pro 2.8 - Remote Buffer Overflow Exploit

No description provided by source. / CrystalFTP Pro v2.8 Buffer Overflow Exploit 04/25/2005 despite the fact that nobody uses CrystalFTP i had to release a new version that replaces the first one. this overwrites the structured exception handler with a pop edx pop eax ret in kernel32.dll. this...

ProFTP 2.9 Banner Remote Buffer Overflow Exploit

No description provided by source. $Id: proftpbanner.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Global Domains International Cross Site Scripting / Traversal

Global Domains International Directory traversal Vulnerability 0-Day ==================================================================== Author : indoushka vendor : http://www.nic.ws ======================================================== Dork : Copyright © 2014 by Global Domains International,...

Google Mail - Mail Encoding & Filter Validation Vulnerability

Document Title: =============== Google Mail - Mail Encoding & Filter Validation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1051 View: http://www.youtube.com/watch?v=ZQJPgLQ1wcU Release Date: ============= 2013-08-15 Vulnerability Laboratory ID VL-ID:...

PlayStation Network Full Restoration by End of Week, Except in Japan

More than a month after suffering an “external intrusion” that shut down the PlayStation Network PSN, Sony announced today that it will fully restore PSN services by the end of the week in most countries. However, PSN users in Sony’s native Japan will have to wait, as the Japanese government awai...

Mandriva 2011 Beta 2 is Available for Testing !

Mandriva 2011 Beta 2 is Available for Testing ! Mandriva 2011 beta 2 was supposed to be released a week ago, but the release schedule was delayed by last minute defects discovered by the development and testing teams. In order to get hold of beta 2, you can visit your favorite Mandriva mirror and...

Simple FTP Client Fuzzer

This module will serve an FTP server and perform FTP client interaction fuzzing This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Fuzzer written by corelanc0d3r -...

CVE-2010-2702

Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary...

MDaemon Mailer Daemon Version 11.0.1 (LATEST) Remote File Disclosure

Exploit for windows platform in category remote exploits ==================================================================== MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure ==================================================================== MDaemon Mailer Daemon Version 11.0....

MDaemon Mailer Daemon 11.0.1 - Remote File Disclosure

MDaemon Mailer Daemon 11.0.1 - Remote File Disclosure MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure Bug Found & Exploited by Kingcope May 2010 The latest version at the time of this advisory is vulnerble to the attack. It seems all files which the SYSTEM account can read can ...

ProFTP 2.9 Banner Remote Buffer Overflow Exploit

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'ProFTP 2.9 Banner Remote Buffer...