Jedesmal, wenn mit eingeschaltetem AdBlocker eine Webseite besucht wird, stirbt in einem Labor ein unschuldiges, niedliches Kaninchen einen grausamen Tod! Zusätzlich werden einige Funktionen dieser Webseite durch den AdBlocker blockiert. Bitte deaktivieren Sie Ihren AdBlocker für diese Webseite und retten Sie unschuldige Kaninchen!
Sie können durch Schliessen dieses Fensters natürlich mit AdBlocker weitermachen - wenn Sie mit dieser Schuld leben können .... es liegt an Ihnen - AdBlocker abschalten und ruhig schlafen können oder mit AdBlocker weitermachen und von übelsten Albträumen gequält werden!
Wir haben Sie gewarnt ....
Search - Review
plg_search_jdownloads
Search - K2
Suche - Kategorien
Suche - Kontakte
Suche - Inhalt
Suche - Newsfeeds
Suche - Schlagwörter
Script Security (4)
Im Sinne der Aktualität sind diese News grösstenteils in englischer Sprache. Falls nötig, bitte die Übersetzungsfunktion verwenden.
-
Ruby On Rails JSON Processor YAML Deserialization Scanner
Ruby Files ≈ Packet Storm Sep 1, 2024 | 17:10 pmThis Metasploit module attempts to identify Ruby on Rails instances vulnerable to an arbitrary object instantiation flaw in the JSON request processor.
Read more... -
Ruby On Rails XML Processor YAML Deserialization Scanner
Ruby Files ≈ Packet Storm Sep 1, 2024 | 16:04 pmThis Metasploit module attempts to identify Ruby on Rails instances vulnerable to an arbitrary object instantiation flaw in the XML request processor.
Read more... -
Ruby On Rails Devise Authentication Password Reset
Ruby Files ≈ Packet Storm Aug 31, 2024 | 21:43 pmThe Devise authentication gem for Ruby on Rails is vulnerable to a password reset exploit leveraging type confusion. By submitting XML to rails, we can influence the type used for the reset_password_token parameter. This allows for resetting passwords of arbitrary[…]
Read more... -
Apple TV Video Remote Control
Ruby Files ≈ Packet Storm Aug 31, 2024 | 21:27 pmThis Metasploit module plays a video on an AppleTV device. Note that AppleTV can be somewhat picky about the server that hosts the video. Tested servers include default IIS, default Apache, and Rubys WEBrick. For WEBrick, the default MIME list[…]
Read more... -
Ruby On Rails File Content Disclosure
Ruby Files ≈ Packet Storm Aug 31, 2024 | 19:37 pmThis Metasploit module uses a path traversal vulnerability in Ruby on Rails versions 5.2.2 and below to read files on a target server.
Read more... -
Nuuo Central Management Server Authenticated Arbitrary File Download
Ruby Files ≈ Packet Storm Aug 31, 2024 | 18:49 pmThe Nuuo Central Management Server allows an authenticated user to download files from the installation folder. This functionality can be abused to obtain administrative credentials, the SQL Server database password and arbitrary files off the system with directory traversal. The[…]
Read more... -
Ruby WEBrick::HTTP::DefaultFileHandler Denial of Service
Ruby Files ≈ Packet Storm Aug 31, 2024 | 17:17 pmThe WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 to 1.8.6-p286, 1.8.7 to 1.8.7-p71, and 1.9 to r18423 allows for a DoS (CPU consumption) via a crafted HTTP request.
Read more... -
Ruby on Rails JSON Processor Floating Point Heap Overflow Denial of Service
Ruby Files ≈ Packet Storm Aug 31, 2024 | 17:17 pmWhen Ruby attempts to convert a string representation of a large floating point decimal number to its floating point equivalent, a heap-based buffer overflow can be triggered. This Metasploit module has been tested successfully on a Ruby on Rails application[…]
Read more... -
Gentoo Linux Security Advisory 202408-24
Ruby Files ≈ Packet Storm Aug 12, 2024 | 14:55 pmGentoo Linux Security Advisory 202408-24 - A vulnerability has been discovered in Ruby on Rails, which can lead to remote code execution via serialization of data. Versions greater than or equal to 6.1.6.1:6.1 are affected.
Read more... -
Red Hat Security Advisory 2024-4542-03
Ruby Files ≈ Packet Storm Jul 15, 2024 | 20:36 pmRed Hat Security Advisory 2024-4542-03 - An update for ruby is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Issues addressed include a HTTP response splitting vulnerability.
Read more...
Publiziert in: Script Security
-
Men Salon Management System 2.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 13, 2024 | 15:47 pmMen Salon Management System version 2.0 suffers from a php code injection vulnerability.
Read more... -
Auto/Taxi Stand Management System 1.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 13, 2024 | 15:39 pmAuto/Taxi Stand Management System version 1.0 suffers from a php code injection vulnerability.
Read more... -
SPIP BigUp 4.3.1 / 4.2.15 / 4.1.17 Unauthenticated Remote Code Execution
PHP Files ≈ Packet Storm Sep 12, 2024 | 17:22 pmThis Metasploit module exploits a Remote Code Execution vulnerability in the BigUp plugin of SPIP. The vulnerability lies in the lister_fichiers_par_champs function, which is triggered when the bigup_retrouver_fichiers parameter is set to any value. By exploiting the improper handling of[…]
Read more... -
Nipah Virus Testing Management System 1.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 12, 2024 | 14:30 pmNipah Virus Testing Management System version 1.0 suffers from a php code injection vulnerability.
Read more... -
Emergency Ambulance Hiring Portal 1.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 12, 2024 | 14:26 pmEmergency Ambulance Hiring Portal version 1.0 suffers from a php code injection vulnerability.
Read more... -
COVID19 Testing Management System 1.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 12, 2024 | 14:24 pmCOVID19 Testing Management System version 1.0 suffers from a php code injection vulnerability.
Read more... -
BP Monitoring Management System 1.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 12, 2024 | 14:19 pmBP Monitoring Management System version 1.0 suffers from a php code injection vulnerability.
Read more... -
Art Gallery Management System 1.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 12, 2024 | 14:15 pmArt Gallery Management System version 1.0 suffers from a php code injection vulnerability.
Read more... -
Ubuntu Security Notice USN-6841-2
PHP Files ≈ Packet Storm Sep 10, 2024 | 16:02 pmUbuntu Security Notice 6841-2 - USN-6841-1 fixed a vulnerability in PHP. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered that PHP could early return in the filter_var function resulting in invalid[…]
Read more... -
VICIdial Multiple Authenticated SQL Injection
PHP Files ≈ Packet Storm Sep 1, 2024 | 17:22 pmThis Metasploit module exploits several authenticated SQL Inject vulnerabilities in VICIdial 2.14b0.5 prior to svn/trunk revision 3555 (VICIBox 10.0.0, prior to January 20 is vulnerable). Injection point 1 is on vicidial/admin.php when adding a user, in the modify_email_accounts parameter. Injection[…]
Read more...
Publiziert in: Script Security
-
Supermicro Onboard IPMI CGI Scanner
CGI Files ≈ Packet Storm Sep 1, 2024 | 16:45 pmThis Metasploit module checks for known vulnerabilities in the CGI applications of Supermicro Onboard IPMI controllers. These issues currently include several unauthenticated buffer overflows in the login.cgi and close_window.cgi components.
Read more... -
Zen Load Balancer Directory Traversal
CGI Files ≈ Packet Storm Sep 1, 2024 | 16:40 pmThis Metasploit module exploits a authenticated directory traversal vulnerability in Zen Load Balancer v3.10.1. The flaw exists in index.cgi not properly handling filelog= parameter which allows a malicious actor to load arbitrary file path.
Read more... -
DnaLIMS Directory Traversal
CGI Files ≈ Packet Storm Sep 1, 2024 | 16:34 pmThis Metasploit module exploits a directory traversal vulnerability found in dnaLIMS. Due to the way the viewAppletFsa.cgi script handles the secID parameter, it is possible to read a file outside the www directory.
Read more... -
Apache 2.4.49/2.4.50 Traversal Remote Code Execution Scanner
CGI Files ≈ Packet Storm Sep 1, 2024 | 16:28 pmThis Metasploit module scans for an unauthenticated RCE vulnerability which exists in Apache version 2.4.49 (CVE-2021-41773). If files outside of the document root are not protected by ‘require all denied’ and CGI has been explicitly enabled, it can be used[…]
Read more... -
Apache Mod_cgi Bash Environment Variable Injection (Shellshock) Scanner
CGI Files ≈ Packet Storm Sep 1, 2024 | 16:27 pmThis Metasploit module scans for the Shellshock vulnerability, a flaw in how the Bash shell handles external environment variables. This Metasploit module targets CGI scripts in the Apache web server by setting the HTTP_USER_AGENT environment variable to a malicious function[…]
Read more... -
Supermicro Onboard IPMI Url_redirect.cgi Authenticated Directory Traversal
CGI Files ≈ Packet Storm Sep 1, 2024 | 16:15 pmThis Metasploit module abuses a directory traversal vulnerability in the url_redirect.cgi application accessible through the web interface of Supermicro Onboard IPMI controllers. The vulnerability is present due to a lack of sanitization of the url_name parameter. This allows an attacker[…]
Read more... -
ZyXEL GS1510-16 Password Extractor
CGI Files ≈ Packet Storm Aug 31, 2024 | 21:44 pmThis Metasploit module exploits a vulnerability in ZyXEL GS1510-16 routers to extract the admin password. Due to a lack of authentication on the webctrl.cgi script, unauthenticated attackers can recover the administrator password for these devices. The vulnerable device has reached[…]
Read more... -
Sophos Web Protection Appliance Patience.cgi Directory Traversal
CGI Files ≈ Packet Storm Aug 31, 2024 | 21:35 pmThis Metasploit module abuses a directory traversal in Sophos Web Protection Appliance, specifically on the /cgi-bin/patience.cgi component. This Metasploit module has been tested successfully on the Sophos Web Virtual Appliance v3.7.0.
Read more... -
Netgear R7000 Backup.cgi Heap Overflow Remote Code Execution
CGI Files ≈ Packet Storm Aug 31, 2024 | 21:34 pmThis Metasploit module exploits a heap buffer overflow in the genie.cgi?backup.cgi page of Netgear R7000 routers running firmware version 1.0.11.116. Successful exploitation results in unauthenticated attackers gaining code execution as the root user. The exploit utilizes these privileges to enable[…]
Read more... -
Webmin Edit_html.cgi File Parameter Traversal Arbitrary File Access
CGI Files ≈ Packet Storm Aug 31, 2024 | 21:28 pmThis Metasploit module exploits a directory traversal in Webmin 1.580. The vulnerability exists in the edit_html.cgi component and allows an authenticated user with access to the File Manager Module to access arbitrary files with root privileges. The module has been[…]
Read more...
snaplitics made a real revolution in the industry.
Publiziert in: Script Security
-
Red Hat Security Advisory 2024-6662-03
Python Files ≈ Packet Storm Sep 16, 2024 | 12:45 pmRed Hat Security Advisory 2024-6662-03 - An update for python-setuptools is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
Read more... -
Stegano 0.11.4
Python Files ≈ Packet Storm Sep 9, 2024 | 15:27 pmStegano is a basic Python Steganography module. Stegano implements two methods of hiding: using the red portion of a pixel to hide ASCII messages, and using the Least Significant Bit (LSB) technique. It is possible to use a more advanced[…]
Read more... -
Red Hat Security Advisory 2024-6358-03
Python Files ≈ Packet Storm Sep 5, 2024 | 15:00 pmRed Hat Security Advisory 2024-6358-03 - An update for python-urllib3 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.
Read more... -
Red Hat Security Advisory 2024-6240-03
Python Files ≈ Packet Storm Sep 4, 2024 | 15:00 pmRed Hat Security Advisory 2024-6240-03 - An update for python-urllib3 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
Read more... -
Red Hat Security Advisory 2024-6162-03
Python Files ≈ Packet Storm Sep 3, 2024 | 14:00 pmRed Hat Security Advisory 2024-6162-03 - An update for python-urllib3 is now available for Red Hat Enterprise Linux 9.
Read more... -
Debian Security Advisory 5763-1
Python Files ≈ Packet Storm Sep 2, 2024 | 15:55 pmDebian Linux Security Advisory 5763-1 - William Khem-Marquez discovered that Pymatgen, a Python library for materials analysis, could be tricked into running arbitrary code if a malformed CIF file is processed.
Read more... -
Apple TV Video Remote Control
Python Files ≈ Packet Storm Aug 31, 2024 | 21:27 pmThis Metasploit module plays a video on an AppleTV device. Note that AppleTV can be somewhat picky about the server that hosts the video. Tested servers include default IIS, default Apache, and Rubys WEBrick. For WEBrick, the default MIME list[…]
Read more... -
Microsoft Windows IPv6 CVE-2024-38063 Checker / Denial Of Service
Python Files ≈ Packet Storm Aug 29, 2024 | 14:16 pmMicrosoft Windows IPv6 vulnerability checking proof of concept python script that causes a denial of service. Windows 10 and 11 versions under 10.0.26100.1457 and Server 2016-2019-2022 versions under 10.0.17763.6189 are affected.
Read more... -
Microsoft Windows IPv6 Memory Corruption
Python Files ≈ Packet Storm Aug 28, 2024 | 15:59 pmThis python script is a proof of concept exploit that demonstrates a IPv6 related memory corruption in Microsoft Windows.
Read more... -
Debian Security Advisory 5759-1
Python Files ≈ Packet Storm Aug 27, 2024 | 15:08 pmDebian Linux Security Advisory 5759-1 - Multiple security issues were discovered in Python, a high-level, interactive, object-oriented language.
Read more...
Publiziert in: Script Security