1254 matches found
Adobe ColdFusion APSB13-03 Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'digest/sha1' require 'openssl' class Metasploit...
Jenkins Script-Console Java Execution Vulnerability
Exploit for multiple platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...
CVE-2012-4959
CVE-2012-4959 affects Novell File Reporter NFRAgent.exe (1.0.2) via directory traversal in FSF/CMD handling of FSFUI records (UICMD 130), enabling remote upload and execution of arbitrary files. Connected data corroborates exploitation in Metasploit modules for NFR Agent 1.0.3/1.0.4.x and public ...
青果教务网络管理系统逻辑处理不严谨导致SQL注入，可至全国数百所高校教务系统沦陷
简要描述： 在这个系统官网上发现该教务系统全国有535所高校在用，测试了几个都成功了，直接是SA权限的MSSQL，有个别貌似版本不一样不行，但是应该大多数都可以通杀。 详细说明： 这里可以看见该系统使用学校（http://www.kingosoft.com/cgal/index1.aspx），教务系统有535所学校在用，貌似这个系统有2个版本，有一个较新的不行，但是大多数都是老版本，可以成功利用该漏洞对服务器攻击，差不多可以影响上百所高校教务系统吧。 接下来分析一下漏洞形成：...
Unfixed XSS vulnerability at www.vente-fondsdecommerce.com
Security researcher Atmon3r, has submitted on 08/01/2012 a cross-site-scripting XSS vulnerability affecting www.vente-fondsdecommerce.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. It i...
PT-2012-5038
Name of the Vulnerable Software and Affected Versions JBMC Software DirectAdmin version 1.403 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the CMD DOMAIN component. These vulnerabilities allow remote authenticated users with specific privileges to inject...
Fixed XSS vulnerability at www.abcgdd.com
Security researcher CMD, has submitted on 25/02/2012 a cross-site-scripting XSS vulnerability affecting www.abcgdd.com, which at the time of submission ranked 18195695 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is currently...
Fixed XSS vulnerability at www.entegreharc.com.tr
Security researcher CMD, has submitted on 25/02/2012 a cross-site-scripting XSS vulnerability affecting www.entegreharc.com.tr, which at the time of submission ranked 7322738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...
vBSEO <= 3.6.0 "proc_deutf()" Remote PHP Code Injection Exploit
Exploit for php platform in category web applications require 'msf/core' class Metasploit3 'vBSEO %q This module exploits a vulnerability in the 'procdeutf' function defined in /includes/functionsvbseocpabstract.php. User input passed through 'charrepl' POST parameter isn't properly sanitized...
Plone and Zope Remote CMD Injection Exploit
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Plone and Zope...
DEBIAN-CVE-2011-4075
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter aka sortby variable in a queryengine action to cmd.php, as exploited in the wild in October 2011...
VulnCheck KEV: CVE-2011-4075
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter aka sortby variable in a queryengine action to cmd.php, as exploited in the wild in October 2011...
phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (Metasploit) (2)
$Id: phpldapadminqueryengine.rb 14060 2011-10-25 05:25:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
serv-u latest pass to kill all versions of 0day-vulnerability warning-the black bar safety net
serv-u latest pass to kill all versions provide the right code. 1 0. x can also mention that yesterday I success 1 1 version, Do not directly add the system account or to execute commands, with the Add FTP account in the CMD the following connection right. Or error-prone. EXP: style type="text/cs...
BisonFTP Server v3.5 (MKD) Remote BOF and Crash
Exploit for windows platform in category remote exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...
Oracle Secure Backup Authentication Bypass/Command Injection Vulnerability
$Id: osbunamejlist.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Symantec System Alert Management System (hndlrsvc.exe) Command Exec
Exploit for windows platform in category remote exploits $Id: amshndlrsvc.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensi...
[Заметка] SSI Web shell
1. Введение В данной заметке я рассмотрю примеры использования SSI, для обхода ограничений php в частности. 2. Теория SSI Server Side Includes — включения на стороне сервера — несложный язык для динамической «сборки» веб-страниц на сервере из отдельных составных частей и выдачи клиенту...
