Subscribe via feed.
Archive for January, 2016

smod Modbus Assessment Framework

Posted by deepcore under Apple (No Respond)

smod is a modular framework with every kind of diagnostic and offensive feature you could need in order to pentest the modbus protocol. It is a full modbus protocol implementation using Python and Scapy. This software can be run on Linux/OSX under python 2.7.x.

Tags: , ,

WordPress Tubepress 2 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Tubepress plugin version 2 suffers from a cross site scripting vulnerability.

WordPress No External Links 2.6.3 / 2.7.1 Open Redirect

Posted by deepcore under exploit (No Respond)

WordPress No External Links plugin versions 2.6.3 and 2.7.1 suffer from an open redirection vulnerability.

SAP HANA 4 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

SAP HANA 4 suffers from a cross site scripting vulnerability.

VMware Workstation 11.1 Vprintproxy.exe Stack Overflow

Posted by deepcore under exploit (No Respond)

Printer virtualization under VMware Workstation involves a vprintproxy.exe process launched by vmware-vmx.exe on the Host. It will receive and process EMFSPOOL files sent by a Guest on its COM1 port, if a virtual printer has been added to the VM hardware (default). Several vulnerabilities in this component allow an unprivileged Guest user to execute code […]

WordPress Commentator 2.5.2 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Commentator plugin version 2.5.2 suffers from a cross site scripting vulnerability.

EasyDNNnews Cross Site Scripting

Posted by deepcore under exploit (No Respond)

EasyDNNnews versions prior to 7.5 suffer from a cross site scripting vulnerability.

[webapps] – mcart.xls Bitrix Module 6.5.2 – SQL Injection Vulnerability

Posted by deepcore under Security (No Respond)

mcart.xls Bitrix Module 6.5.2 – SQL Injection Vulnerability

Tags: ,

[webapps] – phpDolphin <= 2.0.5 – Multiple Vulnerabilities

Posted by deepcore under Security (No Respond)

phpDolphin <= 2.0.5 – Multiple Vulnerabilities

Tags: ,

[local] – Amanda <= 3.3.1 – amstar Command Injection Local Root

Posted by deepcore under Security (No Respond)

Amanda <= 3.3.1 – amstar Command Injection Local Root

Tags: ,