CORE Impact Pro Exploits and Security Updates

When you buy CORE Impact Pro, we provide real-time updates including new penetration testing exploits and tests for additional platforms as they become available. We advise you of any new modules by email, after which you can download them directly from within CORE Impact Pro. All product updates are free during the license period. You're always on the cutting edge of vulnerability and threat intelligence because CORE Impact Pro keeps you there.

Use the controls below to navigate CORE Impact exploits and other modules.

Released Date Title Description Vulnerabilty Categorysort descending Platform
03.01.2009 Typo3 Cross Site Scripting Exploit This module exploits insecure randomness vulnerability in Typo3, which leads to XSS attacks. This module tries to guess the Typo3 encryptionKey by exploiting its insecure randomness. If guessed, it will install an XSS Agent. Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
05.17.2011 eyeOS callback Cross Site Scripting Exploit A reflected cross-site scripting vulnerability in eyeOS 2.3 can be exploited to execute arbitrary JavaScript. NOCVE-9999-47772 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
09.06.2011 OpenEMR pc_category Cross Site Scripting Exploit OpenEMR fails to sanitize the pc_category parameter in interface/main/calendar/index.php leading to a Cross-Site Scripting vulnerability. NOCVE-9999-49218 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
01.25.2010 Wordpress Google Analytics Plugin Cross-Site Scripting Exploit Input passed to the "s" parameter in index.php is not properly sanitised before being returned to the user in googleanalytics.php. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. NOCVE-9999-41354 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
06.22.2010 Microsoft Sharepoint Server 2007 Cross Site Scripting Exploit The vulnerability exists due to failure in the "/_layouts/help.aspx" script to properly sanitize user-supplied input in "cid0" variable. Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data. CVE-2010-0817 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
03.01.2010 vBulletin acuparam Cross Site Scripting Exploit Input passed via the URL is not properly sanitised before being returned to the user within the search.php, sendmessage.php, showgroups.php, usercp.php, online.php, misc.php, memberlist.php, member.php, index.php, forumdisplay.php, inlinemod.php, newthread.php, private.php, profile.php, register.php, showthread.php, subscription.php, forum.php, faq.php, and calendar.php script. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. NOCVE-9999-42237 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
06.29.2010 Moodle blog Cross Site Scripting Exploit Some parameters were not being properly cleaned on the blog index page, allowing non-persistent cross-site scripting (XSS) attacks. NOCVE-9999-44111 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
12.06.2009 Achievo atksearch Cross Site Scripting Exploit A Reflected Cross Site Scripting vulnerability was found in the atksearch[contractnumber], atksearch_AE_customer[customer] and atksearchmode[contracttype] variables within the 'Organisation Contracts' administration page. This is because the application does not properly sanitise the users input. CVE-2009-2733 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
04.19.2010 vBulletin query Cross Site Scripting Exploit The application is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input to the 'query' parameter of the search pages. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. vBulletin 4.0.2 is vulnerable. This issue does not affect vBulletin 3.x versions. NOCVE-9999-42681 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
11.15.2011 Tomcat orderby Cross Site Scripting Exploit The session list screen (provided by sessionList.jsp) in affected versions uses the orderBy and sort request parameters without applying filtering and therefore is vulnerable to a cross-site scripting attack. Users should be aware that Tomcat 6 does not use httpOnly for session cookies by default so this vulnerability could expose session cookies from the manager application to an attacker. CVE-2010-4172 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
08.25.2010 Oracle Business Process Management Cross Site Scripting Exploit A cross site scripting vulnerability in the context parameter in webconsole/faces/jsf/tips.jsp. CVE-2010-2370 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
09.09.2009 VirtualMin Dom Parameter Cross Site Scripting Exploit Input passed to the "dom" parameter in left.cgi and via the URL to virtual-server/link.cgi is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. NOCVE-9999-39439 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
09.23.2009 Jetty Directory Listing Cross Site Scripting Exploit A Cross-Site scripting vulnerability has been reported in Jetty. This vulnerability can be induced whenever Jetty displays a web directory listing. Client-side script code can be included in the HTTP response by appending it next to directory listing's path, preceded by a ';' character. CVE-2009-1524 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
11.15.2011 Xampp php_self Cross Site Scripting Exploit XAMPP suffers from multiple XSS issues in several scripts that use the 'PHP_SELF' variable. The vulnerabilities can be triggered in the 'xamppsecurity.php', 'cds.php' and 'perlinfo.pl' because there isn't any filtering to the mentioned variable in the affected scripts. Attackers can exploit these weaknesses to execute arbitrary HTML and script code in a user's browser session. NOCVE-9999-50264 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
02.16.2010 Hyperic HQ GenericError Page Cross Site Scripting Exploit A reflected cross-site scripting vulnerability was found in the generic exception handler of Hyperic, located in hq/web/common/GenericError.jsp. CVE-2009-2897 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
09.24.2009 Drupal Forum Cross Site Scripting Exploit A Cross-Site Scripting (XSS) vulnerability in the Forum module in Drupal 6.x (proir to version 6.13) allows remote attackers to inject arbitrary web scripts or HTML by requesting a specially crafted tid. The vulnerability is present only if the Forum module is activated, this is not the default configuration but the module is shipped by default with Drupal. CVE-2009-2373 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
08.02.2010 MoinMoin Template Cross-Site Scripting Exploit There is a possible reflected Cross-Site Scripting attack. An attacker able to cause a user to follow a specially crafted malicious link may be able to recover session identifiers or exploit browser vulnerabilities. The template parameter is vulnerable. NOCVE-9999-43852 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
01.31.2010 Testlink login Cross Site Scripting Exploit A cross-site scripting vulnerability is present in TestLink before 1.8.5 allowing remote attackers to inject arbitrary web script or HTML via the req parameter to login.php. CVE-2009-4237 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
04.27.2011 Bugtracker.net edit_comment Cross Site Scripting Exploit The application fails to sanitize the bug_id parameter in several pages such as edit_comment and edit_bug, leading to a cross site scripting vulnerability. CVE-2010-3266 Exploits/Cross Site Scripting (XSS)/Known Vulnerabilities
08.02.2009 WebApps Cross-Site Scripting v9.0 rev 1 This update resolves a conflict found when interacting with a XSS vulnerablility in HTTPS pages. Exploits/Cross Site Scripting (XSS)
01.02.2012 Flash XSS Analyzer Log update This Update modifies the way log is shown while running Flash XSS Analizer module, to clearly reflect the target with its result Exploits/Cross Site Scripting (XSS)
03.03.2009 WebApps Exploit Generator Update v8.0 rev 1 Update solving a conflict between new XSS Exploits and XSS Exploit Generator Exploits/Cross Site Scripting (XSS)
03.16.2009 WebApps Cross-Site Scripting v8.0 rev 1 This package updates WebApps' Cross-Site Scripting features to improve accuracy of detection and reporting of vulnerabilities. Exploits/Cross Site Scripting (XSS)
01.03.2010 WebApps Cross-Site Scripting v10.0 rev 1 This update resolves a conflict found when replacing executables links with links to OS agents. Exploits/Cross Site Scripting (XSS)
09.07.2009 WebApps Cross-Site Scripting v9.0 rev 2 This update resolves a conflict created when working with more than one XSS Exploit Generator at the same time. It also brings more stability when processing deleted Web Browser Agents. Exploits/Cross Site Scripting (XSS)
01.06.2012 Microsoft Windows TrueType Font Parsing Vulnerability Clientside DoS (MS11-087) When a crafted TTF file is processed by Windows kernel it produces a stack exhaustion finishing it in a BSoD. WARNING: This is an early release module. This is not the final version of this module. It is a pre-released version in order to deliver a module as quickly as possible to our customers that may be useful in some situations. Since this module is not the final version it may contain bugs or have limited functionality and may not have complete or accurate documentation. CVE-2011-3402 Denial of Service/Client Side Windows
11.12.2009 Microsoft Windows Remote Kernel Infinite Loop DoS This module sends a malformed NetBIOS packet executing an infinite loop in the target. This is an early release module. This is not the final version of this module. It is a pre-released version in order to deliver a module as quickly as possible to our customers that may be useful in some situations. Since this module is not the final version it may contain bugs or have limited functionality and may not have complete or accurate documentation. CVE-2009-3676 Denial of Service/Client Side Windows
01.13.2010 Microsoft Windows Remote Kernel Infinite Loop DoS Update This module sends a malformed NetBIOS packet which causes the execution of an infinite loop in the target system. This update adds support to Microsoft Windows 2008 and more Microsoft Windows 7 versions. This update adds support to Microsoft Windows as source agent spoofing a network address. Denial of Service/Client Side Windows
04.07.2009 Microsoft Windows NtGdiFastPolyPolyline memory corruption DoS (MS09-006) This module exploits a kernel memory corruption on NtGdiFastPolyPolyline function via a malformed EMF file. CVE-2009-0081 Denial of Service/Client Side Windows
06.22.2010 Microsoft Windows SMB Client Transaction DoS (MS10-020) This module exploits a remote vulnerability in Microsoft Windows SMB client allowing the attacker to cause a DoS in the remote host. CVE-2010-0270 Denial of Service/Client Side Windows

Pages