This module exploits a Moodle Tex Filter Remote Code Execution vulnerability installing an agent.
This update adds support for the Solaris platform.
This update adds support for the Solaris platform.
A denial of service vulnerability has been found in the way the multiple
overlapping ranges are handled by the Apache HTTPD server.
This is an early release module. This is not the final version of this module. It is a pre-released version in order to deliver a module as quickly as possible to our customers that may be useful in some situations. Since this module is not the final version it may contain bugs or have limited functionality and may not have complete or accurate documentation.
overlapping ranges are handled by the Apache HTTPD server.
This is an early release module. This is not the final version of this module. It is a pre-released version in order to deliver a module as quickly as possible to our customers that may be useful in some situations. Since this module is not the final version it may contain bugs or have limited functionality and may not have complete or accurate documentation.
RRSIG Queries can trigger a server crash in ISC BIND servers when Response Policy Zones is in use.
This is an early release module. This is not the final version of this module. It is a pre-released version in order to deliver a module as quickly as possible to our customers that may be useful in some situations. Since this module is not the final version it may contain bugs or have limited functionality and may not have complete or accurate documentation.
This is an early release module. This is not the final version of this module. It is a pre-released version in order to deliver a module as quickly as possible to our customers that may be useful in some situations. Since this module is not the final version it may contain bugs or have limited functionality and may not have complete or accurate documentation.
With this update, RPT will prioritize newer exploits when attacking a target.
The Administration Console of Oracle GlassFish Server is prone to an authentication bypass vulnerability, which can be achieved by performing HTTP TRACE requests. A remote unauthenticated attacker can exploit this in order to execute arbitrary code on the vulnerable server.
This module exploits a TinyWebGallery local file-include vulnerability because TinyWebGallery fails to properly sanitize user-supplied input. The module takes advantage of the logging capabilities of the attacked software to remotely execute arbitrary code.
The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. This module works if map:map_yp_alias is set as the imap server address in config.php, which is not the default setting.
This module exploits a Remote Code Execution vulnerability in Mantis
version 1.1.3 when handling the sort parameter in manage_proj_page without
the proper validation that leads to a remote code execution on Mantis' Web
server.
This update adds support for the OSX platform.
version 1.1.3 when handling the sort parameter in manage_proj_page without
the proper validation that leads to a remote code execution on Mantis' Web
server.
This update adds support for the OSX platform.
The BlogAPI module does not validate the extension of files that it is used to upload, enabling users with the "administer content with blog api" permission to upload harmful files. This module uploads an IMPACT agent, creates a php file to execute the agent and then makes a request to the file. The result is an IMPACT agent running on the webserver.
This update adds support for the AIX platform.
This update adds support for the AIX platform.
This module exploits a Remote Code Execution vulnerability in Mantis
version 1.1.3 when handling the sort parameter in manage_proj_page without
the proper validation that leads to a remote code execution on Mantis' Web
server.
This update adds support for the AIX platform.
version 1.1.3 when handling the sort parameter in manage_proj_page without
the proper validation that leads to a remote code execution on Mantis' Web
server.
This update adds support for the AIX platform.