5368 matches found
EspCMS最新版可伪造任意帐户登陆（简单利用代码）
简要描述： EspCMS最新版可伪造任意帐户登陆（源码分析） 测试版本espcmsutf85.8.14.03.03b 详细说明： EspCMS中用户cookie生成算法中重要的就是dbpscode 貌似前面有大牛提交过多次，厂商都只是略作修改，并没有最终搞定问题 这里来说一下，可以通过注册普通帐号，通过帐号+cookie破解得到dbpscode 首先是cookie加密算法，/public/classfunction.php，144-170行 function eccode$string, $operation = 'DECODE', $key =...
vtiger CRM 5.4.0 get_tickets_list SQLi
SQL Injection vulnerability in vtiger CRM getticketslist SOAP method in /soap/customerportal.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
DedeCMS latest through the kill injection(buy_action.php)vulnerability analysis-vulnerability warning-the black bar safety net
0x00 Preface Two days ago, dark clouds white hat submitted two DedeCMS through killing injection vulnerabilities, much noise uproar, 2, No. 5, weaving dreams official release of the patch, so you download the latest code back to do a comparison, here is a simple analysis under the one injection...
Oracle Demantra 12.2.1 - Arbitrary File Disclosure
Oracle Demantra 12.2.1 - Arbitrary File Disclosure Details: The Team discovered a Local File Include LFI vulnerability. A file inclusion vulnerability occurs when a file from the target system is injected into a page on the attacked server page. The vulnerable page is: /demantra/GraphServlet...
Oracle Demantra 12.2.1 - Arbitrary File Disclosure
Exploit for windows platform in category web applications Details: The Team discovered a Local File Include LFI vulnerability. A file inclusion vulnerability occurs when a file from the target system is injected into a page on the attacked server page. The vulnerable page is: /demantra/GraphServl...
startbbs最新版本泄露任意用户邮箱
简要描述： 都不知道挖到哪里去了，你们的源码昨天看了一天了...... 详细说明： 主要是你们开发安全意识差啊... /themes/default/userinfo.php在第86行有这样一句 联系方式: " class="external mail"-- 把用户的邮箱输出了但是被注释了！-- 查看源码就可以了。 漏洞证明： 这里我测试了官网demo的，抓取了一个妹子的....（PS：已经加为好友！）...
Google Chrome Developer Tools vulnerability exploit-vulnerability warning-the black bar safety net
0x00 introduction The story originated in the Chromium source code in the named InjectedScriptSource.js files, this file is responsible for the console in the command execution. Maybe a lot of people would say: 【Wait! Why is the JavaScript in charge of the command execution,Chromium/Chrome is not...
CVE-2014-0842
The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code...
Default credentials
The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code...
CVE-2014-0842
The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code...
CVE-2014-0842
The CVE-2014-0842 vulnerability affects IBM Rational Focal Point 6.4.x and 6.5.x prior to 6.5.2.3, and 6.6.x prior to 6.6.1. The account-creation page places the new user’s default password in the HTML source, allowing remote attackers to read sensitive credentials via page source inspection. Imp...
[ParameterFuzz v1.8] Parameter´s auditor for web applications
ParameterFuzz is a tool to check the level of fortification in web applications, try to cover the field more exploited by hackers, as the majority of known attacks are based on exploiting poorly filtered parameters. Just as SQL injection, Cross Site Scripting or RFI among others. This tool is...
Android iBanking Trojan Source Code Leaked Online
Smartphone is the need of everyone today and so the first target of most of the Cyber Criminals. Malware authors are getting to know their market and are changing their way of operations. Since last year we have seen a rise in the number of hackers moving from the Blackhat into the Greyhat. The...
程氏舞曲CMS最新php版本高危SQL注入漏洞
简要描述： 注入毫无限制！ 详细说明： 昨天刚下载的源码（应该最新的吧...） bug文件位置：https://images.seebug.org/upload/app/models/csdjskins.php第3466行 function GetIP //定义了一个获取ip地址的函数 if getenv"HTTPCLIENTIP" && strcasecmpgetenv"HTTPCLIENTIP", "unknown" //换取ip地址，如果存在，则使用clientip。 $ip = getenv"HTTPCLIENTIP"; else if...
Java 7 Update 5-10 vulnerability to download and execute
This exploit affects several versions of Java, as seen from the description, it downloads and runs the file. Usage Info All material comes with source code and you can easily gather exploit you only need to mark you address the file to your. Traffic to be poured on the file 1.html as shown in the...
[OWASP iGoat] Security learning tool for iOS developers
The OWASP iGoat project is a security learning tool for iOS developers to learn about security weaknesses in iOS -- by breaking things as well as fixing them. iGoat is available ONLY in source code format, and this is the official repository for that code. On the Downloads tab here, you will find...
CSCMS V3.5 最新补丁后 又一个SQL注射（源码详析）
简要描述： CSCMS V3.5 最新补丁后 又一个SQL注射（源码详析） 之前的注射已经修补了，但是还有几处注射点没有注意到 详细说明： 在addslash + 引号保护 的情况下 要格外注意数字型变量的处理 /app/controllers/home.php line:1020 public function gbookdel header"Expires: Mon, 26 Jul 1997 05:00:00 GMT"; header"Cache-Control: no-cache, must-revalidate"; header"Pragma: no-cache";...
doorGets CMS 5.2 SQL Injection
Advisory ID: HTB23197 Product: doorGets CMS Vendor: doorGets Vulnerable Versions: 5.2 and probably prior Tested Version: 5.2 Advisory Publication: January 15, 2014 without technical details Vendor Notification: January 15, 2014 Vendor Patch: January 15, 2014 Public Disclosure: February 5, 2014...
Microsoft launching 'Transparency Center' for Source code integrity Check
Last Friday at the 50th Munich Security Conference, Microsoft announced to launch 'Transparency centers' around the World, where government customers will be able to verify the source code of Microsoft’s products and can confirm that there are no backdoors. The recent chain of scandals over US...