BlueZone Desktop .zap file Local Denial of Service Vulnerability

No description provided by source. Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service Date: 10-15-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest Tested on: Windows XP SP3 To trigger: Run this...

Collabtive 1.2 - Stored XSS

No description provided by source. Vulnerability title: Stored XSS vulnerability in Collabtive application CVE-2014-3247 CVE: CVE-2014-3247coordinated with cve assigning team and vendor Vendor: Collabtive Product: Collabtive Open Source Project Management Software Affected version: 1.12 Fixed...

OWASP Mantra Security Toolkit - Browser Based Security Framework

OWASP Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source...

OWASP ZAP v2.3.1 - An easy to use integrated penetration testing tool for finding vulnerabilities in web applications

OWASP Zed Attack Proxy ZAP An easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing...

Collabtive 1.2 - Stored XSS Vulnerability

Exploit for php platform in category web applications Vulnerability title: Stored XSS vulnerability in Collabtive application CVE-2014-3247 CVE: CVE-2014-3247coordinated with cve assigning team and vendor Vendor: Collabtive Product: Collabtive Open Source Project Management Software Affected...

Collabtive 1.2 - Persistent Cross-Site Scripting

Collabtive 1.2 - Persistent Cross-Site Scripting Vulnerability title: Stored XSS vulnerability in Collabtive application CVE-2014-3247 CVE: CVE-2014-3247coordinated with cve assigning team and vendor Vendor: Collabtive Product: Collabtive Open Source Project Management Software Affected version:...

Collabtive 1.2 - Persistent Cross-Site Scripting

Vulnerability title: Stored XSS vulnerability in Collabtive application CVE-2014-3247 CVE: CVE-2014-3247coordinated with cve assigning team and vendor Vendor: Collabtive Product: Collabtive Open Source Project Management Software Affected version: 1.12 Fixed version: 2.0 Reported by: Deepak Ratho...

OWASP ZAP v2.3.0 - An easy to use integrated penetration testing tool for finding vulnerabilities in web applications

OWASP Zed Attack Proxy ZAP An easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing...

OWASP ZAP 2.3.0.1 - An easy to use integrated penetration testing tool for finding vulnerabilities in web applications

The OWASP Zed Attack Proxy ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration...

Joomla Zap Weather FPD & Zap Calendar跨站脚本漏洞

No description provided by source. Title - Joomla Zap Weather FPD & Zap Calendar XSS Date: 01.21.2014 Vendor: zcontent.net extensions.joomla.org/extensions/owner/cogliano Versions - Z Weather v9 & Zap Calendar v4.0 Latests ATM Contant: smashatdevilteam.pl Zap Weather PoC -...

Joomla Zap Weather FPD & Zap Calendar XSS Vulnerability

Latests zcontent plugins suffers on cross site scripting and full path disclosure vulnerabilities because of poor variables filtration. Title - Joomla Zap Weather FPD & Zap Calendar XSS Date: 01.21.2014 Vendor: zcontent.net extensions.joomla.org/extensions/owner/cogliano Versions - Z Weather v9 &...

Penetration Testing Browser Bundle: PenQ

PenQ is an open source, Linux-based penetration testing browser bundle we built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more. Penetration Testin...

[SCIP] Indentify, Enumerate & Execute Invisible ASP.net Controls

SCIP is an OWASP ZAP extension designed to assess the security of ASP.net and Mono applications, while abusing platform specific behaviors and misconfigurations. The extension currently supports the following features: Identify the existence of invisible, commented and disabled server side web...

[Diviner] OWASP Zed Attack Proxy Extension

Diviner is a unique platform that attempts to predict the structure of the server-side memory, source code and processes,by executing scenarios aimed to fingerprint behaviors that derive from specific lines of code, processes or memory allocations,by employing the use of a variety of coverage...

BlueZone Desktop - .zap file Local Denial of Service

BlueZone Desktop - .zap file Local Denial of Service Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service Date: 10-15-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest Tested on: Windows XP SP3 To...

BlueZone Desktop - '.zap' file Local Denial of Service

Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service Date: 10-15-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest Tested on: Windows XP SP3 To trigger: Run this script, double click file to open with...

BlueZone Desktop .zap file Local Denial of Service Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service Date: 10-15-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest Tested on: Windows XP SP3 To trigge...

NetServe Web Server v1.0.58 Multiple Remote Vulnerabilities

Summary NetServe is a super compact Web Server and File Sharing application for Windows NT, 95, 98, 2000, and XP. It's HTTP Web Server can serve all types of files including html, gif and jpeg, actually any files placed in your NetServe directory can be served. New key features include...

PBX Phone System v2.x & 3.x - Multiple Web Vulnerabilities

Document Title: =============== PBX Phone System v2.x & 3.x - Multiple Web Vulnerabilities References Source: ==================== CVE: 2009-4458 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4458 OSVDB-ID: 61357 http://osvdb.org/show/osvdb/61357 EDB-ID: 10645...

CVE-2009-4458

Multiple cross-site scripting XSS vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow remote attackers to inject arbitrary web script or HTML via the 1 tech parameter to admin/admin/config.php during a trunks display action, the 2 description parameter during an Add...