Real Name | Marc Ruef |
---|---|
Email address | private |
First Active | 2000-07-18 |
Last Active | 2013-10-28 |
MobileIron version 4.5.4 suffers from a cross site scripting vulnerability in the device registration functionality.
0086a60987e5725b61729a566ad575d52c9d7f81ffe6150d619bb1da469fb747
This is a NSE script written for nmap that adds vulnerability scanning.
83f3c568ec7872a28bedb9da04a868377573b2544d75b2e1d2a7e96f0de281aa
This is a NSE script written for nmap that adds vulnerability scanning.
a36473e6e38e4484f78ca4df6a612d03afa635b3f67c7fc0ab609db50416ec42
Shemes Grabbit suffers from a malicious NZB file related denial of service vulnerability.
dd8f4bd253788e849c9c760e1204e9c3a0cbaaa54947b455f67903536f36ac84
The Skype client for Mac Chat suffers from a unicode related denial of service vulnerability.
f948952222defade88deecce448672cc4c9753535691afb7597dc9381db5ac14
Midfp (Message-ID Fingerprinter) determines the mail client from the message-id which is included in an email. It analyzes the structure of the message-id and compares it with regular expressions against a database.
a19386eab491198b5cf2bc2b4bc7bcce52d33d930d405033f5efcddbd4e4edcb
IBM Lotus Notes version 8.5 suffers from a RSS widget privilege escalation vulnerability.
df967d2e5f81410f4465fd7e61108a192978fb101774f40b0156c2bab1af6b24
telnetrecon is a tool for doing research in the field of telnet server fingerprinting.
381794d4db9b91bdb21324d29c26bbe0f88acaa4c731fbf8f51b1ce50be71322
Pro2col StingRay FTS suffers from a cross site scripting vulnerability via the login username functionality.
24f6911ba28f77c3b0dd0a5756d49433a480655e4285e291ee815c73fe7b74da
The D-Link DIR-100 suffers from a long url filter evasion vulnerability.
32012424d05f55871c7620c41ba3f2686d855405288fec574d38d174b7c7eebd
An input validation error within the web interface of Dreambox model DM500C allows for a denial of service condition.
b07f925091a95eb3ffd99e8e205d865b485e692d12f1fceebd5a4600fea29e9e
browserrecon is a framework that performs client-side HTTP fingerprinting. Be sure to hit their site to download the latest fingerprints database.
d37d7efea8951475554a42f5248c7e1de2b4115e3f323ebdd096383e01fbbb38
httprecon is an advanced web server fingerprinting tool that makes use of nine test cases when mapping the target service. Source release.
91f9586eb1d62dde8af49f5b3147bb53e12765f765715a3cee066448fe4917f1
httprecon is an advanced web server fingerprinting tool that makes use of nine test cases when mapping the target service. Win32 binary release.
9cd458eff1ac5c4bfc1d2f1bc04c68bfa192fbc60705474af3aa7bbb0acd7305
SiteScape Forum versions prior to 7.3 suffer from an input validation flaw that allows for arbitrary javascript insertion.
093f753a1723a404dac3f95d19723da79cf687420ced67ae4808de6b3d6f4f12
An input validation vulnerability exists in the Cisco CallManager version 4.1 and possibly in earlier versions as well.
e8ec52bed7f7a15a6801ff5345ef0d8dcd9b16a7993afa2f2e9359f96d9661e7
The Horde Framework and Horde IMP systems are susceptible to cross site scripting attacks in search.php. Flaws are verified in Horde versions 3.0.4 through 3.1.2 and IMP versions prior to 4.1.3.
26c3ceb148d5508570a99beb7063062a83fe03cece6d91d209c274554ed67c30
The Horde Framework and Horde IMP systems are susceptible to cross site scripting attacks in index.php. Flaws are verified in Horde versions 3.0.4 through 3.1.2 and IMP versions prior to 4.1.3.
7c57bc41e7ce313d1d89a5dbbcc9d4f11333e6aa61b26698f67ec4ec0f4dc009
F5 FirePass 4100 versions below 6.x suffer from multiple cross site scripting flaws.
b8e1671c06bb63a5f4b8b4faefaa9d278f2bb592810478e991cc62b98f564d9f
Kyberna AG ky2help is susceptible to SQL injection attacks.
a4ae8484dfc9590a59f7f8d66850d6562b5266ce06ff4f3e8fe4ee48d57d4415
Alkacon OpenCMS 6.0.2 suffers from a cross site scripting flaw via the login process.
6712272afe41ebceb4e4a4ae32a1af73ca657bd114e93f3a464146b07e513641
Marc Ruef found an old fashioned denial of service flaw in the NetGear RP114 device.
167e8da4ecc7e712ceaf1c5d26f4e4a95a24545fe23726e64b3d9b463f6f6364
e107 version 0.6 is susceptible to a voting manipulation flaw in rate.php.
95e0984c729ea5ba5d733100805fd95305beec52393b661132040af4778c98bb
e107 version 0.6 has an input validation flaw in forum_post.php that allows attackers the ability to create topics in non-existing forums.
54ebb505ef7de3a47c44cc973d59da1fe31893292a35300fb1af1a1046ebe05e
The Netegrity SiteMinder smpwservicescgi.exe is susceptible to a remote data inclusion vulnerability that allows for phishing attacks.
ba2e8bce8ac6c15f997f1dbeffe9a186f5050292a7ea62b8f9c7ae2dde132eee