Showing 1 - 6 of 6

Files from Emilio Pinna

VMTurbo Operations Manager 4.6 vmtadmin.cgi Remote Command Execution: Posted Aug 14, 2014; Authored by Emilio Pinna | Site metasploit.com; VMTurbo Operations Manager 4.6 and prior are vulnerable to unauthenticated OS Command injection in the web interface. Use reverse payloads for the most reliable results. Since it is a blind OS command injection vulnerability, there is no output for the executed command when using the cmd generic payload. Port binding payloads are disregarded due to the restrictive firewall settings. This Metasploit module has been tested successfully on VMTurbo Operations Manager versions 4.5 and 4.6.; tags | exploit, web; advisories | CVE-2014-5073; SHA-256 | 0649ca7e973fb4b39c646f1c27813549f1cb5f0d02c263f2d2f7d20f3e123eb4; Download | Favorite | View

Moodle CMS 2.5.0-1 Cross Site Scripting: Posted Sep 16, 2013; Authored by Emilio Pinna; Moodle CMS version 2.5.0-1 suffers from a cross site scripting vulnerability.; tags | exploit, xss; SHA-256 | e3ac4ae54569cb79f99f56b55d391649ec34ad904958620a13e84eeeba37dd72; Download | Favorite | View

Joomla 3.1.5 Cross Site Scripting: Posted Aug 6, 2013; Authored by Emilio Pinna; Joomla versions 3.1.5 and 3.1.4 suffer from a reflective cross site scripting vulnerability in example.php.; tags | exploit, php, xss; SHA-256 | 505f805cbabe1c1344542d455a87ded89cd66960ecb7055c0c0e53332da1021d; Download | Favorite | View

Alice Telecom Routers Cross Site Request Forgery: Posted Sep 2, 2012; Authored by Emilio Pinna; Alice Telecom Italia AGPF ADSL router suffers from multiple cross site request forgery vulnerabilities.; tags | advisory, vulnerability, csrf; SHA-256 | 1959c188ad9ad6749c3e418fd4e2dcf8038fda109ae668d36b1177b35b37d4c0; Download | Favorite | View

Weevely PHP Backdoor 0.7: Posted Jul 11, 2012; Authored by Emilio Pinna | Site epinna.github.com; Weevely is a stealth PHP web shell that simulates a telnet-like connection. It is an essential tool for web application testing post exploitation, and can be used as a stealth backdoor web shell to manage legit web accounts, even free hosted ones. Is currently included in Backtrack and Backbox and other Linux distributions for penetration testing.; Changes: Portscan modules added. Proxies modules added. File system browsing and remote command execution even if PHP security restrictions are in place. Various other additions.; tags | tool, web, shell, php, rootkit; systems | linux, unix; SHA-256 | 9ca1b6b62a4fcc57851e48e31b456e9ea711e0ef46b10cf39d3277547b450333; Download | Favorite | View

Kusaba X 0.9.1 Cross Site Request Forgery / Cross Site Scripting: Posted Apr 29, 2011; Authored by Emilio Pinna; Kusaba X versions 0.9.1 and below suffers from a cross site scripting vulnerability and a cross site request forgery vulnerability that allows for arbitrary SQL statement execution.; tags | exploit, arbitrary, xss, csrf; SHA-256 | 64e2bd26377186de93fea5e171b4925473cc45a08142ff4fd3e932681827e225; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days