[Canvas] D2 Exploitation Pack 1.73, February 5 2014

[DSquare Security]

D2 Exploitation Pack 1.73 has been released with 5 new exploits.

This month we provide you one client side exploit for Lorex Edge which 
has been included in D2 Client Insider.

Also you can find two web exploits for HP SiteScope and Apache Struts2.
pwnrouter and passdisclo have been both updated with one new exploit.

D2 Exploitation Pack is updated each month with new exploits and tools.
For customized exploits or tools please contact us at info at d2sec.com.

For sales inquiries and orders, please contact sales at d2sec.com

Happy New Year!

--
DSquare Security, LLC
http://www.d2sec.com


Changelog:

version 1.73 Feb 5, 2014
------------------------------

canvas_modules - Added :
- d2sec_lorex : Lorex Edge INetViewX ActiveX Buffer Overflow Vulnerability (Exploit Windows)
- d2sec_sitescope : HP SiteScope 11.20 runOMAgentCommand Remote Code Execution Vulnerability (Web Exploit)
- d2sec_struts_devmode : Apache Struts2 Devmode Remote Command Execution Tool (Tool)
- d2sec_passdisclo : 
  - Add JBoss EAP Permission Weakness Local Information Disclosure Vulnerability 
  - minor updates
- d2sec_pwnrouter :
  - Nisuta Remote Authentication Bypass Vulnerability

canvas_modules - Updated :
- d2sec_clientinsider updated with new exploit